crvUSD
ChainSecurity reviewed Curve.fi (crvUSD) on 21 Feb 2025: 29 findings, 0 critical; 28 marked fixed, 1 open.
Report hosted on chainsecurity.com.
Trustblock does not review code.
Findings29
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 3 |
| Medium | 1 | 0 | 6 |
| Low | 0 | 0 | 19 |
HighChecks-effects-interactions Pattern and Reentrancy LocksFixed
The report gives no description here.
HighIncorrect Verification of Health LimitFixed
The report gives no description here.
HighOracle Price Updates Can Be SandwichedFixed
The report gives no description here.
MediumIncorrect Max BandFixed
The report gives no description here.
MediumInterest Rate Does Not CompoundFixed
The report gives no description here.
MediumManipulation of Active BandFixed
The report gives no description here.
MediumNon-Tradable FundsFixed
The report gives no description here.
MediumPegKeeper Can Be Drained if Redeemable Stablecoin Permanently DepegsFixed
The report gives no description here.
MediumPotential Denial of Service (DoS) Attack on Peg KeeperFixed
The report gives no description here.
LowA User's Liquidation Discount Can Be Updated by Anyone at Any TimeFixed
The report gives no description here.
Show 10 more
LowApplyNewAdmin Event Emitted With Wrong Argument in PegKeeperFixed
The report gives no description here.
LowDraining FundsFixed
The report gives no description here.
LowInaccurate _p_oracle_up(n) for High/Low Values of nFixed
The report gives no description here.
LowIncorrect Array LengthFixed
The report gives no description here.
LowIncorrect Calculations in health_calculatorFixed
The report gives no description here.
LowIncorrect CommentsFixed
The report gives no description here.
LowMeaningful Revert ReasonsFixed
The report gives no description here.
LowMissing Sanity ChecksFixed
The report gives no description here.
LowMultiple Calls to the AMMFixed
The report gives no description here.
LowNo EventsFixed
The report gives no description here.
Show 8 more
LowNon-Indexed EventsFixed
The report gives no description here.
LowPotential Optimization With Immutable PriceOracleFixed
The report gives no description here.
LowPotentially Incorrect Admin FeesFixed
The report gives no description here.
LowSimpler Calculations PossibleFixed
The report gives no description here.
LowSuperfluous CheckFixed
The report gives no description here.
LowSuperfluous Interface DefinitionsFixed
The report gives no description here.
LowSuperfluous Variable Assignment for Number of BandsFixed
The report gives no description here.
LowUnnecessary SubtractionFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (8)
- mpolicies/AggMonetaryPolicy.vy
- AMM.vy
- Stablecoin.vy
- price_oracles/AggregateStablePrice.vy
- Controller.vy
- stabilizer/PegKeeper.vy
- price_oracles/CryptoWithStablePriceAndChainlinkFrxeth.vy
- ControllerFactory.vy
Part of Curve.fi’s security record
Curve.fiSecurity firm
ChainSecurity81 projects reviewed · 286 reports · latest Nov 2026
See ChainSecurity’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us