Teller Lender Groups Update audit
Audit competition · firm’s term: public contest
Sherlock reviewed Teller (Teller Lender Groups Update audit) on 10 Dec 2024: 11 findings, 0 critical; 9 marked fixed, 2 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings11
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 3 |
| Medium | 0 | 2 | 6 |
| Low | 0 | 0 | 0 |
HighLender group members can be prevented from burning their shares foreverFixed
The report gives no description here.
HighMalicious lender can prevent borrower from repayment due to try/catch block revertFixed
The report gives no description here.
HighUsing original principal amount as due amount inside liquidateDefaultedLoanWithIncentive breaks contract accounting leading to lost assets/broken functionalitiesFixed
The report gives no description here.
MediumAttacker can revoke any user from a marketFixed
The report gives no description here.
MediumERC20.approve Used Instead of Safe Approvals, Causing Pool Failures with Some ERC20sFixed
The report gives no description here.
MediumNot updating state before making custom external call can cause borrower's to loose assets due to re-entrancyFixed
The report gives no description here.
MediumRepayer can brick lending functionality of LenderCommitmentGroup_Smart by repaying excessFixed
The report gives no description here.
MediumThe totalPrincipalTokensRep aid and totalInterestCollected may not be updated even when funds are already transferredFixed
The report gives no description here.
MediumTokens that revert of zero value transfers can cause reverts on liquidationFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Teller’s security record
TellerSecurity firm
Sherlock46 projects reviewed · 67 reports · latest Sep 2026
See Sherlock’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us