Composable Corp / Lending Platform

HackenFiles named in the report

Audit

Hacken reviewed Blueberry (Composable Corp / Lending Platform) on 26 Apr 2023: 34 findings, 0 critical; 29 marked fixed, 5 open.

No open critical findings
Open the reportOpen Blueberry’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings34

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High002
Medium2010
Low3017
HighInvalid Calculations — Collateral Value CorruptionFixed

The report gives no description here.

HighUpgradeability Issues — Missing Storage GapFixed

The report gives no description here.

MediumBest Practice Violation — Denial of ServiceFixed

The report gives no description here.

MediumBest Practice Violation — Unpausable OraclesFixed

The report gives no description here.

MediumContradiction — Requirement ViolationFixed

The report gives no description here.

MediumContradiction — Unchecked RelymentFixed

The report gives no description here.

MediumContradiction — Unchecked RelymentFixed

The report gives no description here.

MediumContradiction — Unchecked RelymentFixed

The report gives no description here.

MediumContradiction — Unchecked RelymentFixed

The report gives no description here.

MediumContradiction — Unvalidated TWAP PeriodFixed

The report gives no description here.

Show 10 more
MediumContradiction — Unvalidated TWAP PeriodFixed

The report gives no description here.

MediumContradiction — Zero Price AllowedFixed

The report gives no description here.

LowBest Practice ViolationFixed

The report gives no description here.

LowBest Practice ViolationFixed

The report gives no description here.

LowCode DuplicationFixed

The report gives no description here.

LowDefault VisibilityFixed

The report gives no description here.

LowDuplicated Hardcoded ValuesFixed

The report gives no description here.

LowLegacy CheckFixed

The report gives no description here.

LowMisleading NamesFixed

The report gives no description here.

LowMissing Implementation InitializationFixed

The report gives no description here.

Show 9 more
LowMissing Zero Address ValidationFixed

The report gives no description here.

LowMixing Functionality PurposesFixed

The report gives no description here.

LowMixing WhitelistsFixed

The report gives no description here.

LowParameters Order DependenceFixed

The report gives no description here.

LowRedundant ActionsFixed

The report gives no description here.

LowRedundant ImportsFixed

The report gives no description here.

LowRedundant StatementsFixed

The report gives no description here.

LowRedundant Using StatementFixed

The report gives no description here.

LowUnscalable FunctionalityFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (54)

  • contracts/utils/BlueBerryErrors.sol
  • contracts/wrapper/WERC20.sol
  • contracts/interfaces/chainlink/IFeedRegistry.sol
  • contracts/interfaces/IWIchiFarm.sol
  • contracts/interfaces/uniswap/IUniswapV2Router02.sol
  • contracts/utils/EnsureApprove.sol
  • contracts/oracle/CoreOracle.sol
  • contracts/FeeManager.sol
  • contracts/interfaces/IWERC20.sol
  • contracts/interfaces/ichi/IICHIVaultFactory.sol
  • contracts/oracle/IchiVaultOracle.sol
  • contracts/interfaces/ISoftVault.sol
  • contracts/interfaces/uniswap/ISwapRouter.sol
  • contracts/interfaces/IBank.sol
  • contracts/interfaces/IProtocolConfig.sol
  • contracts/interfaces/curve/ICurveRegistry.sol
  • contracts/wrapper/WIchiFarm.sol
  • contracts/interfaces/balancer/IBalancerPool.sol
  • contracts/interfaces/sushi/IMasterChef.sol
  • contracts/spell/BasicSpell.sol
  • contracts/oracle/BandAdapterOracle.sol
  • contracts/oracle/BaseOracleExt.sol
  • contracts/libraries/UniV3/UniV3WrappedLibMockup.sol
  • contracts/interfaces/IWETH.sol
  • contracts/libraries/UniV3/UniV3WrappedLib.sol
  • contracts/oracle/AggregatorOracle.sol
  • contracts/interfaces/compound/ICErc20.sol
  • contracts/interfaces/band/IStdReference.sol
  • contracts/utils/BlueBerryConst.sol
  • contracts/interfaces/compound/ICErc20_2.sol
  • contracts/BlueBerryBank.sol
  • contracts/interfaces/IFeeManager.sol
  • contracts/interfaces/IBaseOracle.sol
  • contracts/vault/SoftVault.sol
  • contracts/interfaces/IHardVault.sol
  • contracts/libraries/BBMath.sol
  • contracts/vault/HardVault.sol
  • contracts/spell/IchiSpell.sol
  • contracts/interfaces/ichi/IIchiFarm.sol
  • contracts/oracle/ChainlinkAdapterOracle.sol
  • contracts/interfaces/ICoreOracle.sol
  • contracts/interfaces/compound/IComptroller.sol
  • contracts/oracle/UsingBaseOracle.sol
  • contracts/ProtocolConfig.sol
  • contracts/interfaces/ichi/IICHIVault.sol
  • contracts/utils/ERC1155NaiveReceiver.sol
  • contracts/oracle/UniswapV2Oracle.sol
  • contracts/oracle/UniswapV3AdapterOracle.sol
  • contracts/interfaces/curve/ICurvePool.sol
  • contracts/interfaces/IERC20Wrapper.sol
  • contracts/interfaces/ichi/IIchiV2.sol
  • contracts/interfaces/curve/ILiquidityGauge.sol
  • contracts/oracle/BaseAdapter.sol
  • contracts/interfaces/compound/ICEtherEx.sol

Part of Blueberry’s security record

Blueberry
Audits4 audits by 2 firmsLast audit May 2025, by Pashov Audit Group.
Critical findingsNo open critical findingsAcross the 4 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open Blueberry’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us