Numoen

CertiKFiles named in the report

CertiK reviewed Numoen on 7 Dec 2022: 8 findings, 1 critical; 4 marked fixed, 4 open.

1 open critical finding
Open the reportOpen Numoen’s security record

Report hosted on skynet.certik.com.

Statuses are the security firm’s own, from this report. Trustblock does not review code.

Findings8

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical100
High000
Medium000
Low304
LowCustom errors require solidity version 0.8.4 andFixed

An issue relating to custom error messages used in contracts can occur with the current solidity compiler settings. The solidity version is currently set to `pragma solidity ^0.8.0`, however the solidity version needs to be at least 0.8.4 or above to [support custom errors](https://blog.soliditylang.org/2021/04/21/custom-errors/).

LowFunction `transfer` of Contract `ERC20` Does NotFixed

It is expected that calls of the form `transfer(recipient, amount)` fail if the recipient address is the zero address.

LowFunction Should Be Declared ExternalFixed

The functions which are never called internally within the contract should have external visibility for gas optimization. #### ERC20.sol ```solidity=61 function approve(address spender, uint256 amount) public virtual returns (bool) { ``` --- ```solidity=69 function transfer(address to, uint256 amount) public virtual returns (bool) { ``` --- ```solidity=83 function transferFrom( ``` --- ```solidity=109 function permit( ```

LowPotential Loss of Precision Could lead to revertFixed

The loss of precision on the calculation in L161~162 could cause the invariant check revert. ```solidity=161 uint256 amount0 = PRBMath.mulDiv(r0, liquidity, _totalSupply); uint256 amount1 = PRBMath.mulDiv(r1, liquidity, _totalSupply); if (!verifyInvariant(amount0, amount1, liquidity)) revert InvariantError(); ``` The `verifyInvariant()` requires the exact number of two tokens to be matched according to the formula. However, the loss of precision could cause the two token's amount to be unmatched, thus causing the revert on the invariant check.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (14)

  • src/Pair.sol
  • src/libraries/SafeTransferLib.sol
  • src/Factory.sol
  • src/JumpRate.sol
  • src/libraries/LendgineAddress.sol
  • src/interfaces/ILendgine.sol
  • src/libraries/Position.sol
  • src/interfaces/IMintCallback.sol
  • src/libraries/LiquidityMath.sol
  • src/interfaces/IJumpRate.sol
  • src/interfaces/IFactory.sol
  • src/interfaces/IPair.sol
  • src/Lendgine.sol
  • src/ERC20.sol

Part of Numoen’s security record

Numoen
Audits1 audit by 1 firmLast audit Dec 2022, by CertiK.
Critical findings1 open critical findingReported in “Numoen” by CertiK, Dec 2022. Not marked fixed in that report.
Open Numoen’s security record

Security firm

CertiK

1,044 projects reviewed · 1,393 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us