Euler Vault Kit (EVK) Audit

OpenZeppelinFiles named in the report

OpenZeppelin reviewed Euler Finance (Euler Vault Kit (EVK) Audit) on 20 May 2024: 20 findings, 0 critical; 11 marked fixed, 9 acknowledged.

No open critical findings
Open the reportOpen Euler Finance’s security record

Report hosted on blog.openzeppelin.com.

Statuses are the security firm’s own, from this report. Trustblock does not review code.

Findings20

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium021
Low079
HighMissing Gap Between Borrow LTV and Liquidation ThresholdFixed

The report gives no description here.

MediumUnhealthy Position Locks Collateral That Is Not Recognizable by the ControllerFixed

The report gives no description here.

LowDebt Socialization Can Be PreventedFixed

The report gives no description here.

LowEnum Elements Sorting Is Not ConsistentFixed

The report gives no description here.

LowIncomplete DocstringsFixed

The report gives no description here.

LowIncorrect Event EmissionFixed

The report gives no description here.

LowInternal Accounting Mechanism is Incompatible With Tokens That Charge FeesFixed

The report gives no description here.

LowMismatch Between Documentation and ImplementationFixed

The report gives no description here.

LowMissing DocstringsFixed

The report gives no description here.

LowMissing Input ValidationFixed

The report gives no description here.

Show 1 more
LowUnhandled Call OutputFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (52)

  • src/EVault/Dispatch.sol
  • src/EVault/shared/types/UserStorage.sol
  • src/ProtocolConfig/ProtocolConfig.sol
  • src/EVault/shared/LTVUtils.sol
  • src/EVault/shared/types/Assets.sol
  • src/EVault/modules/Token.sol
  • src/EVault/shared/types/Types.sol
  • src/EVault/modules/BalanceForwarder.sol
  • src/EVault/shared/EVCClient.sol
  • src/EVault/shared/types/Flags.sol
  • src/EVault/shared/lib/SafeERC20Lib.sol
  • src/EVault/modules/Liquidation.sol
  • src/EVault/shared/types/Shares.sol
  • src/EVault/shared/lib/RevertBytes.sol
  • src/EVault/shared/types/AmountCap.sol
  • src/EVault/shared/Constants.sol
  • src/InterestRateModels/IIRM.sol
  • src/EVault/modules/Borrowing.sol
  • src/EVault/shared/types/VaultCache.sol
  • src/EVault/IEVault.sol
  • src/EVault/shared/Cache.sol
  • src/EVault/DToken.sol
  • src/EVault/shared/Errors.sol
  • src/InterestRateModels/IRMLinearKink.sol
  • src/EVault/EVault.sol
  • src/GenericFactory/BeaconProxy.sol
  • src/EVault/modules/Vault.sol
  • src/ProtocolConfig/IProtocolConfig.sol
  • src/EVault/shared/Base.sol
  • src/GenericFactory/GenericFactory.sol
  • src/EVault/shared/AssetTransfers.sol
  • src/EVault/modules/Initialize.sol
  • src/interfaces/IPermit2.sol
  • src/EVault/shared/lib/ProxyUtils.sol
  • src/EVault/modules/RiskManager.sol
  • src/interfaces/IPriceOracle.sol
  • src/EVault/shared/Storage.sol
  • src/EVault/shared/lib/RPow.sol
  • src/EVault/shared/types/ConfigAmount.sol
  • src/EVault/shared/BalanceUtils.sol
  • src/GenericFactory/MetaProxyDeployer.sol
  • src/EVault/shared/types/LTVConfig.sol
  • src/EVault/modules/Governance.sol
  • src/EVault/shared/LiquidityUtils.sol
  • src/EVault/shared/types/LTVType.sol
  • src/EVault/shared/types/Snapshot.sol
  • src/EVault/shared/Events.sol
  • src/EVault/shared/BorrowUtils.sol
  • src/EVault/shared/lib/ConversionHelpers.sol
  • src/EVault/shared/types/Owed.sol
  • src/interfaces/IBalanceTracker.sol
  • src/EVault/shared/types/VaultStorage.sol

Part of Euler Finance’s security record

Euler Finance
Audits8 audits by 2 firmsLast audit Mar 2025, by ChainSecurity.
Critical findingsNo open critical findingsAcross 8 reports.
IncidentIncident 12 Mar 2023Source: De.Fi incident database.
Open Euler Finance’s security record

Security firm

OpenZeppelin

67 projects reviewed · 185 reports · latest Aug 2026

See OpenZeppelin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us