Alpha Finance Homora V2 Audit
Audit · firm’s term: audit
OpenZeppelin reviewed Alpha Venture DAO (Alpha Finance Homora V2 Audit) on 13 May 2021: 17 findings, 0 critical; 11 marked fixed, 6 open.
Report hosted on blog.openzeppelin.com.
Trustblock does not review code.
Findings17
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 1 | 0 | 1 |
| Low | 5 | 0 | 9 |
High[H01] Users can force other users to pay their feesFixed
The report gives no description here.
Medium[M01] Math not rounding in protocol favorFixed
The report gives no description here.
Low[L01] Spells make assumptions about underlying collateralFixed
The report gives no description here.
Low[L03] Events missing or not well indexedFixed
The report gives no description here.
Low[L05] Incorrect interface definitionFixed
The report gives no description here.
Low[L06] Not handling approve return valueFixed
The report gives no description here.
Low[L07] Misleading commentsFixed
The report gives no description here.
Low[L08] Protocol does not fully support ERC20 tokens with feesFixed
The report gives no description here.
Low[L10] The pairs mapping in BalancerSpellV1 is permanently emptyFixed
The report gives no description here.
Low[L11] Number of oracle sources can exceed reversion thresholdFixed
The report gives no description here.
Show 1 more
Low[L12] WMasterChef can leave Sushi inaccessibleFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (5)
- contracts/wrapper/WStakingRewards.sol
- contracts/oracle/AggregatorOracle.sol
- contracts/oracle/CoreOracle.sol
- contracts/spell/CurveSpellV1.sol
- contracts/oracle/ProxyOracle.sol
Part of Alpha Venture DAO’s security record
Alpha Venture DAOSecurity firm
OpenZeppelin67 projects reviewed · 184 reports · latest Aug 2026
See OpenZeppelin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us