Nimbora Protocol Security Review
Audit · firm’s term: security review
Cairo Security Clan reviewed Nimbora (Nimbora Protocol Security Review) on 24 Apr 2024: 4 findings, 1 critical; all marked fixed.
Trustblock does not review code.
Findings4
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 0 | 1 |
CriticalUntitled findingFixed
The report gives no description here.
HighL1 strategy calculated withdrawal amounts are inconsistentFixed
The redeem and withdraw functions in the SavingsDai strategy return different values causing the report handler to calculate missing tokens incorrectly. This may lead to solvency issues over time. Consider correcting and re-checking the returned values.
MediumL1 relayer can lock deposited funds halt the L2 pooling managerFixed
The report gives no description here.
LowUntitled findingFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (10)
- poolingmanager/implementationstarknetpoolingmanager.sol
- srctoken/token.cairo
- lib/starknetmessaging.sol
- srcutils.cairo
- srctoken_bridge/token_bridge.cairo
- srctoken_manager/token_manager.cairo
- poolingmanager/poolingmanagerbase.sol
- srcpooling_manager/pooling_manager.cairo
- strategies/savingdai/savingdai.sol
- srcfactory/factory.cairo
Part of Nimbora’s security record
NimboraSecurity firm
Cairo Security Clan13 projects reviewed · 21 reports · latest Sep 2025
See Cairo Security Clan’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us