Altitude

OXORIOFiles named in the report

Audit

OXORIO reviewed Altitude on 16 Jul 2024: 37 findings, 1 critical; 23 marked fixed, 14 acknowledged.

1 critical finding, fixed
Open the reportOpen Altitude’s security record

Report hosted on audits.oxor.io.

Trustblock does not review code.

Findings37

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High033
Medium078
Low0411
HighHarvest profit deprivation due to resetting harvestJoiningBlock in HarvestableVaultV1Acknowledged

The report gives no description here.

HighmigrationFee increases borrow without considering availableBorrow in GroomableManagerAcknowledged

The report gives no description here.

HighPossible overflow in HarvestableManagerAcknowledged

The report gives no description here.

MediumDeposit limit check may cause transaction reversion in IngressAcknowledged

The report gives no description here.

MediumInsufficient reference price validation in StrategyGenericPoolAcknowledged

The report gives no description here.

MediumLack of EIP-165 interface support validationAcknowledged

The report gives no description here.

MediumLack of functionality to withdraw stuck tokensAcknowledged

The report gives no description here.

MediumLack of support for deflationary tokens in VaultCoreAcknowledged

The report gives no description here.

MediumPossibility of complete withdrawal in case of farm loss in VaultCoreV1Acknowledged

The report gives no description here.

MediumReference price is set up externally in StrategyGenericPoolAcknowledged

The report gives no description here.

Show 4 more
LowDouble execution of setBalance logic in SnapshotableManagerAcknowledged

The report gives no description here.

LowManual price limit in HarvestableManagerAcknowledged

The report gives no description here.

LowRedundant _onlyVault function in InterestTokenAcknowledged

The report gives no description here.

LowVariable can be immutable in FarmBufferStrategyAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (102)

  • contracts/access/Ingress.sol
  • contracts/interfaces/internal/strategy/farming/IConvexFarmStrategy.sol
  • contracts/interfaces/internal/strategy/swap/ISwapStrategyConfiguration.sol
  • contracts/interfaces/internal/vault/extensions/groomable/IGroomableManager.sol
  • contracts/interfaces/internal/tokens/ISupplyToken.sol
  • contracts/vaults/v1/extensions/farmmode/FarmModeVault.sol
  • contracts/libraries/types/SupplyLossTypes.sol
  • contracts/interfaces/internal/vault/IVaultCoreV1Initializer.sol
  • contracts/oracles/UniswapV3Twap.sol
  • contracts/interfaces/internal/vault/IInterestVault.sol
  • contracts/common/ProxyExtension.sol
  • contracts/libraries/types/HarvestTypes.sol
  • contracts/vaults/v1/base/VaultStorage.sol
  • contracts/vaults/v1/ETH/VaultETH.sol
  • contracts/misc/BorrowVerifier.sol
  • contracts/interfaces/internal/access/IIngress.sol
  • contracts/vaults/v1/extensions/snapshotable/SnapshotableVault.sol
  • contracts/vaults/v1/ProxyInitializable.sol
  • contracts/decision-makers/farm-mode-decision/FarmModeDecisionMaker.sol
  • contracts/libraries/types/VaultTypes.sol
  • contracts/tokens/DebtToken.sol
  • contracts/libraries/utils/HealthFactorCalculator.sol
  • contracts/interfaces/internal/vault/IVaultStorage.sol
  • contracts/interfaces/internal/misc/incentives/rebalance/IRebalanceIncentivesController.sol
  • contracts/interfaces/internal/tokens/IDebtToken.sol
  • contracts/vaults/v1/VaultCore.sol
  • contracts/misc/incentives/rebalance/RebalanceIncentivesController.sol
  • contracts/vaults/v1/extensions/liquidatable/LiquidatableManager.sol
  • contracts/strategies/farming/convex/StrategyMeta3Pool.sol
  • contracts/tokens/TokensFactory.sol
  • contracts/interfaces/internal/oracles/IPriceSource.sol
  • contracts/interfaces/internal/decision-makers/farm-mode-decision/IFarmModeDecisionMaker.sol
  • contracts/vaults/v1/extensions/snapshotable/SnapshotableManager.sol
  • contracts/oracles/ChainlinkPrice.sol
  • contracts/vaults/v1/ERC20/VaultERC20.sol
  • contracts/interfaces/internal/strategy/lending/IAaveStrategy.sol
  • contracts/interfaces/internal/flashloan/IFlashLoanStrategy.sol
  • contracts/tokens/SupplyToken.sol
  • contracts/interfaces/internal/vault/extensions/IVaultExtensions.sol
  • contracts/strategies/farming/FarmBufferStrategy.sol
  • contracts/interfaces/internal/vault/extensions/groomable/IGroomableVault.sol
  • contracts/tokens/InterestToken.sol
  • contracts/interfaces/internal/misc/incentives/position/IPositionIncentivesController.sol
  • contracts/interfaces/internal/tokens/ITokensFactory.sol
  • contracts/vaults/v1/extensions/snapshotable/harvest/HarvestableVault.sol
  • contracts/strategies/swap/SwapStrategyConfiguration.sol
  • contracts/interfaces/internal/misc/vault-operable/IVaultOperable.sol
  • contracts/interfaces/internal/vault/extensions/supply-loss/ISupplyLossManager.sol
  • contracts/strategies/farming/convex/StrategyGenericPool.sol
  • contracts/vaults/v1/extensions/snapshotable/supply-loss/SupplyLossManager.sol
  • contracts/interfaces/internal/strategy/farming/IFarmStrategy.sol
  • contracts/common/VaultOperable.sol
  • contracts/interfaces/internal/vault/extensions/harvestable/IHarvestableVault.sol
  • contracts/vaults/v1/extensions/configurable/ConfigurableVault.sol
  • contracts/strategies/farming/convex/StrategyMetaPool.sol
  • contracts/interfaces/internal/strategy/farming/IFarmBuffer.sol
  • contracts/interfaces/internal/strategy/farming/IFarmDropMonitorStrategy.sol
  • contracts/interfaces/internal/vault/extensions/liquidatable/ILiquidatableVault.sol
  • contracts/interfaces/internal/vault/extensions/harvestable/IHarvestableManager.sol
  • contracts/interfaces/internal/strategy/lending/ILenderStrategy.sol
  • contracts/interfaces/internal/vault/IVaultRegistry.sol
  • contracts/interfaces/internal/strategy/IFlashLoanCallback.sol
  • contracts/interfaces/internal/oracles/IChainlinkPrice.sol
  • contracts/interfaces/internal/vault/IVaultCore.sol
  • contracts/vaults/v1/extensions/configurable/ConfigurableManager.sol
  • contracts/interfaces/internal/misc/IBorrowVerifier.sol
  • contracts/libraries/utils/FlashLoan.sol
  • contracts/strategies/swap/UniswapV3Strategy.sol
  • contracts/interfaces/internal/vault/extensions/snapshotable/ISnapshotableVault.sol
  • contracts/strategies/lending/LenderStrategy.sol
  • contracts/vaults/v1/extensions/groomable/GroomableManager.sol
  • contracts/vaults/v1/VaultRegistry.sol
  • contracts/vaults/v1/VaultInitializer.sol
  • contracts/strategies/lending/aave/v3/StrategyAaveV3.sol
  • contracts/vaults/v1/extensions/groomable/GroomableVault.sol
  • contracts/interfaces/internal/vault/extensions/configurable/IConfigurableVault.sol
  • contracts/interfaces/internal/vault/extensions/supply-loss/ISupplyLossVault.sol
  • contracts/strategies/swap/SwapStrategy.sol
  • contracts/strategies/flashloan/Aavev2FlashLoanStrategy.sol
  • contracts/strategies/swap/CurveV2Strategy.sol
  • contracts/strategies/farming/FarmStrategy.sol
  • contracts/interfaces/internal/vault/extensions/snapshotable/ISnapshotableManager.sol
  • contracts/vaults/v1/extensions/snapshotable/supply-loss/SupplyLossVault.sol
  • contracts/strategies/farming/FarmDropMonitorStrategy.sol
  • contracts/strategies/farming/FarmBuffer.sol
  • contracts/vaults/v1/extensions/farmmode/FarmModeManager.sol
  • contracts/vaults/v1/extensions/snapshotable/harvest/HarvestableManager.sol
  • contracts/interfaces/internal/strategy/farming/IFarmBufferStrategy.sol
  • contracts/interfaces/internal/tokens/IInterestToken.sol
  • contracts/misc/incentives/position/PositionIncentivesController.sol
  • contracts/strategies/farming/convex/StrategyStable2Pool.sol
  • contracts/interfaces/internal/vault/extensions/farmmode/IFarmModeManager.sol
  • contracts/libraries/utils/CommitMath.sol
  • contracts/vaults/v1/base/InterestVault.sol
  • contracts/libraries/utils/Utils.sol
  • contracts/libraries/types/CommonTypes.sol
  • contracts/common/Roles.sol
  • contracts/interfaces/internal/vault/extensions/liquidatable/ILiquidatableManager.sol
  • contracts/interfaces/internal/strategy/swap/ISwapStrategy.sol
  • contracts/interfaces/internal/vault/extensions/farmmode/IFarmModeVault.sol
  • contracts/vaults/v1/extensions/liquidatable/LiquidatableVault.sol
  • contracts/interfaces/internal/strategy/lending/ICompStrategy.sol

Part of Altitude’s security record

Altitude
Audits1 audit by 1 firmLast audit Jul 2024, by OXORIO.
Critical findingsNo open critical findingsIn that report, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open Altitude’s security record

Security firm

OXORIO

6 projects reviewed · 15 reports · latest Dec 2024

See OXORIO’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us