Composable Corp / Lending Platform

HackenFiles named in the report

Audit

Hacken reviewed Blueberry (Composable Corp / Lending Platform) on 26 Apr 2023: 34 findings, 0 critical; 29 marked fixed, 5 open.

No open critical findings
Open the reportOpen Blueberry’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings34

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High002
Medium2010
Low3017
MediumBest Practice Violation — Zero Price AllowedOpen

The report gives no description here.

MediumUnscalable Functionality — Immutable Position TokenOpen

The report gives no description here.

LowCode DuplicationOpen

The report gives no description here.

LowRedundant StatementsOpen

The report gives no description here.

LowUnscalable FunctionalityOpen

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (54)

  • contracts/utils/BlueBerryErrors.sol
  • contracts/wrapper/WERC20.sol
  • contracts/interfaces/chainlink/IFeedRegistry.sol
  • contracts/interfaces/IWIchiFarm.sol
  • contracts/interfaces/uniswap/IUniswapV2Router02.sol
  • contracts/utils/EnsureApprove.sol
  • contracts/oracle/CoreOracle.sol
  • contracts/FeeManager.sol
  • contracts/interfaces/IWERC20.sol
  • contracts/interfaces/ichi/IICHIVaultFactory.sol
  • contracts/oracle/IchiVaultOracle.sol
  • contracts/interfaces/ISoftVault.sol
  • contracts/interfaces/uniswap/ISwapRouter.sol
  • contracts/interfaces/IBank.sol
  • contracts/interfaces/IProtocolConfig.sol
  • contracts/interfaces/curve/ICurveRegistry.sol
  • contracts/wrapper/WIchiFarm.sol
  • contracts/interfaces/balancer/IBalancerPool.sol
  • contracts/interfaces/sushi/IMasterChef.sol
  • contracts/spell/BasicSpell.sol
  • contracts/oracle/BandAdapterOracle.sol
  • contracts/oracle/BaseOracleExt.sol
  • contracts/libraries/UniV3/UniV3WrappedLibMockup.sol
  • contracts/interfaces/IWETH.sol
  • contracts/libraries/UniV3/UniV3WrappedLib.sol
  • contracts/oracle/AggregatorOracle.sol
  • contracts/interfaces/compound/ICErc20.sol
  • contracts/interfaces/band/IStdReference.sol
  • contracts/utils/BlueBerryConst.sol
  • contracts/interfaces/compound/ICErc20_2.sol
  • contracts/BlueBerryBank.sol
  • contracts/interfaces/IFeeManager.sol
  • contracts/interfaces/IBaseOracle.sol
  • contracts/vault/SoftVault.sol
  • contracts/interfaces/IHardVault.sol
  • contracts/libraries/BBMath.sol
  • contracts/vault/HardVault.sol
  • contracts/spell/IchiSpell.sol
  • contracts/interfaces/ichi/IIchiFarm.sol
  • contracts/oracle/ChainlinkAdapterOracle.sol
  • contracts/interfaces/ICoreOracle.sol
  • contracts/interfaces/compound/IComptroller.sol
  • contracts/oracle/UsingBaseOracle.sol
  • contracts/ProtocolConfig.sol
  • contracts/interfaces/ichi/IICHIVault.sol
  • contracts/utils/ERC1155NaiveReceiver.sol
  • contracts/oracle/UniswapV2Oracle.sol
  • contracts/oracle/UniswapV3AdapterOracle.sol
  • contracts/interfaces/curve/ICurvePool.sol
  • contracts/interfaces/IERC20Wrapper.sol
  • contracts/interfaces/ichi/IIchiV2.sol
  • contracts/interfaces/curve/ILiquidityGauge.sol
  • contracts/oracle/BaseAdapter.sol
  • contracts/interfaces/compound/ICEtherEx.sol

Part of Blueberry’s security record

Blueberry
Audits4 audits by 2 firmsLast audit May 2025, by Pashov Audit Group.
Critical findingsNo open critical findingsAcross the 4 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open Blueberry’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us