Solv Yield - Bearing Tokens

CertiK8 Apr 2024Files named in the report

CertiK reviewed Solv Protocol (Solv Yield - Bearing Tokens) on 8 Apr 2024: 9 findings, 0 critical; 6 marked fixed, 1 acknowledged, 2 open.

No open critical findings

Open the report Open Solv Protocol’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	1	0
Medium	0	0	1
Low	2	0	5

LowOut-of-Scope DependenciesOpen

The contract is serving as the underlying entity to interact with the out-of-scope contracts `IOpenFundMarket` and deposit tokens to the `IOpenFundMarket`. The scope of the audit treats these entities as black boxes and assumes their functional correctness. However, in the real world, external dependencies and out-of-scope contracts can be compromised and this may lead to lost or stolen assets.

LowUnused InheritancesOpen

The `SftWrapRouter` inherits `AdminControlUpgradeable` and `GovernorControlUpgradeable`, which are initiated but never used. This could potentially lead to confusion and inefficiency in contract deployment and interaction.