Aave v3.2 Liquid eModes

OXORIO12 Sep 2024Files named in the report

OXORIO reviewed Aave (Aave v3.2 Liquid eModes) on 12 Sep 2024: 10 findings, 0 critical; 3 marked fixed, 7 acknowledged.

No open critical findings

Open the report Open Aave’s security record

Report hosted on audits.oxor.io.

Trustblock does not review code.

Findings10

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	1	1
Medium	0	1	0
Low	0	5	2

HighA new reserve upon initialization may unintentionally be included in an emode category in EModeConfigurationAcknowledged

The report gives no description here.

MediumPossibility to modify the bitmap for non-existent emode categories in PoolConfiguratorAcknowledged

The report gives no description here.

LowEmode category id cast to uint256 in PoolAcknowledged

The report gives no description here.

LowMagic number used as the maximum number of emode categories in UiPoolDataProviderV3Acknowledged

The report gives no description here.

LowMisleading Comment Regarding missCounter in getEModes functionAcknowledged

The report gives no description here.

LowRedunant import of EmodeEngine in ListingEngineAcknowledged

The report gives no description here.

LowSame error description for different errors within the setEModeCategory function in PoolConfiguratorAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (13)

src/contracts/protocol/libraries/helpers/Errors.sol
src/contracts/interfaces/IPoolConfigurator.sol
src/contracts/protocol/libraries/logic/ValidationLogic.sol
src/contracts/protocol/libraries/configuration/ReserveConfiguration.sol
src/contracts/protocol/pool/PoolConfigurator.sol
src/contracts/protocol/libraries/configuration/EModeConfiguration.sol
src/contracts/protocol/libraries/logic/ConfiguratorLogic.sol
src/contracts/helpers/AaveProtocolDataProvider.sol
src/contracts/protocol/libraries/logic/LiquidationLogic.sol
src/contracts/interfaces/IPoolDataProvider.sol
src/contracts/protocol/libraries/types/DataTypes.sol
src/contracts/protocol/libraries/logic/EModeLogic.sol
src/contracts/protocol/libraries/logic/GenericLogic.sol

Part of Aave’s security record

Aave

Audits28 audits by 11 firmsLast audit Jun 2026, by Certora.

Critical findingsNo open critical findingsAcross the 28 reports, 6 critical findings were reported. Each is marked fixed by the firm that reported it.

IncidentIncident 27 Aug 2024Source: De.Fi incident database.

Open Aave’s security record

Security firm

OXORIO

6 projects reviewed · 15 reports · latest Dec 2024

See OXORIO’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.