Euler Vault Kit (EVK) Audit

OpenZeppelin20 May 2024Files named in the report

OpenZeppelin reviewed Euler Finance (Euler Vault Kit (EVK) Audit) on 20 May 2024: 20 findings, 0 critical; 11 marked fixed, 9 acknowledged.

No open critical findings

Open the report Open Euler Finance’s security record

Report hosted on blog.openzeppelin.com.

Statuses are the security firm’s own, from this report. Trustblock does not review code.

Findings20

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	1
Medium	0	2	1
Low	0	7	9

MediumArbitrary unitOfAccount Asset Could Cause Liquidations or Erroneous Value ConversionsAcknowledged

The report gives no description here.

MediumLack of Incentives to Liquidate Small PositionsAcknowledged

The report gives no description here.

LowCode-in-Address Does Not Guarantee CompatibilityAcknowledged

The report gives no description here.

LowCollateral With No Value Can Be Claimed Through LiquidationAcknowledged

The report gives no description here.

LowDepositors Can Avoid Participating in Debt SocializationAcknowledged

The report gives no description here.

LowFees Should Be Distributed Before Change of the Fee ConfigurationAcknowledged

The report gives no description here.

LowFloating PragmaAcknowledged

The report gives no description here.

LowLTV Duality Could Prevent Under-Collateralized Debt MitigationsAcknowledged

The report gives no description here.

LowMissing Check if the Returned Value From Price Oracle Is ZeroAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (52)

src/EVault/Dispatch.sol
src/EVault/shared/types/UserStorage.sol
src/ProtocolConfig/ProtocolConfig.sol
src/EVault/shared/LTVUtils.sol
src/EVault/shared/types/Assets.sol
src/EVault/modules/Token.sol
src/EVault/shared/types/Types.sol
src/EVault/modules/BalanceForwarder.sol
src/EVault/shared/EVCClient.sol
src/EVault/shared/types/Flags.sol
src/EVault/shared/lib/SafeERC20Lib.sol
src/EVault/modules/Liquidation.sol
src/EVault/shared/types/Shares.sol
src/EVault/shared/lib/RevertBytes.sol
src/EVault/shared/types/AmountCap.sol
src/EVault/shared/Constants.sol
src/InterestRateModels/IIRM.sol
src/EVault/modules/Borrowing.sol
src/EVault/shared/types/VaultCache.sol
src/EVault/IEVault.sol
src/EVault/shared/Cache.sol
src/EVault/DToken.sol
src/EVault/shared/Errors.sol
src/InterestRateModels/IRMLinearKink.sol
src/EVault/EVault.sol
src/GenericFactory/BeaconProxy.sol
src/EVault/modules/Vault.sol
src/ProtocolConfig/IProtocolConfig.sol
src/EVault/shared/Base.sol
src/GenericFactory/GenericFactory.sol
src/EVault/shared/AssetTransfers.sol
src/EVault/modules/Initialize.sol
src/interfaces/IPermit2.sol
src/EVault/shared/lib/ProxyUtils.sol
src/EVault/modules/RiskManager.sol
src/interfaces/IPriceOracle.sol
src/EVault/shared/Storage.sol
src/EVault/shared/lib/RPow.sol
src/EVault/shared/types/ConfigAmount.sol
src/EVault/shared/BalanceUtils.sol
src/GenericFactory/MetaProxyDeployer.sol
src/EVault/shared/types/LTVConfig.sol
src/EVault/modules/Governance.sol
src/EVault/shared/LiquidityUtils.sol
src/EVault/shared/types/LTVType.sol
src/EVault/shared/types/Snapshot.sol
src/EVault/shared/Events.sol
src/EVault/shared/BorrowUtils.sol
src/EVault/shared/lib/ConversionHelpers.sol
src/EVault/shared/types/Owed.sol
src/interfaces/IBalanceTracker.sol
src/EVault/shared/types/VaultStorage.sol

Part of Euler Finance’s security record

Euler Finance

Audits8 audits by 2 firmsLast audit Mar 2025, by ChainSecurity.

Critical findingsNo open critical findingsAcross 8 reports.

IncidentIncident 12 Mar 2023Source: De.Fi incident database.

Open Euler Finance’s security record

Security firm

OpenZeppelin

67 projects reviewed · 185 reports · latest Aug 2026

See OpenZeppelin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.