Liquidity Bootstrapping Pool Manager
Paladin reviewed Swerve (Liquidity Bootstrapping Pool Manager) on 23 Aug 2023: 14 findings, 0 critical; 12 marked fixed, 2 acknowledged.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings14
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 2 |
| Medium | 0 | 1 | 2 |
| Low | 0 | 1 | 8 |
HighAdding liquidity to TraderJoe will result in stuck fundsFixed
The report gives no description here.
HighFees can be circumvented by partial withdrawalsFixed
The report gives no description here.
MediumBoth exit functions are vulnerable to frontrunningFixed
The report gives no description here.
MediumUsers can circumvent the fee on fundTokenFixed
The report gives no description here.
Low_feeRecipientsBPS and _recipientAddresses are privateFixed
The report gives no description here.
Low_recipientAddresses distribution is flawedFixed
The report gives no description here.
LowgetPools will eventually malfunction due to gas issuesFixed
The report gives no description here.
LowLack of validationFixed
The report gives no description here.
LowLBP creators are limited in their privilegesFixed
The report gives no description here.
LowLeftover tokens can get stuck during createLBPFixed
The report gives no description here.
Show 2 more
LowThe contract does not work with tokens that have a fee on transferFixed
The report gives no description here.
LowTypographical issuesFixed
The report gives no description here.
Contracts in scope1
| Address | Chain | Source code |
|---|---|---|
| 0xfddec530d36d3b51753018948ef40ea64626046b | Chain: Arbitrum | Source code: Verified source |
Part of Swerve’s security record
Security firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us