Aave Token

Off-Chain (Private)

Audited on 2020/06/30

No active critical issues

Summary

Executive Summary This report presents the results of our engagement with Aave to review Aave Token. The review was conducted over 3 days, from July 6 to July 8 2020, by Daniel Luca and John Mardlin as part of an ongoing engagement between Aave and ConsenSys Diligence. A total of 4 person-days were spent. During the first day, we became familiar with the source code, as well as ran tests and coverage without issues.

Project

Aave

Multi-Chain

Issues (3)

	Low	Medium	High	Critical	Total
Not fixed	3	-	-	-	3
Fixed	-	-	-	-	0
Total	3	0	0	0	3

Contracts (3)

#	File Name
1	contracts/utils/VersionedInitializable.sol
2	contracts/token/LendToAaveMigrator.sol
3	contracts/token/AaveToken.sol

#	File Name
1	contracts/utils/VersionedInitializable.sol
2	contracts/token/LendToAaveMigrator.sol
3	contracts/token/AaveToken.sol

Aave Token

Summary

Issues (3)

Permit expiration can be set indefinite by using MAX_UINT Closednot_fixed/low

Pin the Solidity version to the latest stable 0.6.x Closednot_fixed/low

Remove nonce argument from permit functions Closednot_fixed/low

Contracts (3)