Contango Core V2 audit
ABDK Consulting reviewed Contango Protocol (Contango Core V2 audit) on 3 Oct 2023: 163 findings, 1 critical; 27 marked fixed, 136 acknowledged.
Report hosted on GitHub.
Statuses are the security firm’s own, from this report. Trustblock does not review code.
Findings163
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 10 |
| Medium | 0 | 24 | 2 |
| Low | 0 | 112 | 14 |
MediumOverflow/Underflow in Contango.solAcknowledged
The report gives no description here.
MediumOverflow/Underflow in Maestro.solAcknowledged
The report gives no description here.
MediumOverflow/Underflow in SpotExecutor.solAcknowledged
The report gives no description here.
MediumProcedural in Contango.solAcknowledged
The report gives no description here.
MediumSuboptimal in IFlashBorrowProvider.solAcknowledged
The report gives no description here.
MediumSuboptimal in OrderManagerArbitrum.solAcknowledged
The report gives no description here.
MediumSuboptimal in OrderManagerOptimism.solAcknowledged
The report gives no description here.
MediumSuboptimal in SpotExecutor.solAcknowledged
The report gives no description here.
MediumUnclear behavior in AaveMoneyMarket.solAcknowledged
The report gives no description here.
MediumUnclear behavior in AaveMoneyMarket.solAcknowledged
The report gives no description here.
Show 10 more
MediumUnclear behavior in BaseMoneyMarket.solAcknowledged
The report gives no description here.
MediumUnclear behavior in Contango.solAcknowledged
The report gives no description here.
MediumUnclear behavior in Contango.solAcknowledged
The report gives no description here.
MediumUnclear behavior in Contango.solAcknowledged
The report gives no description here.
MediumUnclear behavior in ERC20Lib.solAcknowledged
The report gives no description here.
MediumUnclear behavior in ExactlyReverseLookup.solAcknowledged
The report gives no description here.
MediumUnclear behavior in FeeManager.solAcknowledged
The report gives no description here.
MediumUnclear behavior in IFlashBorrowProvider.solAcknowledged
The report gives no description here.
MediumUnclear behavior in Maestro.solAcknowledged
The report gives no description here.
MediumUnclear behavior in OrderManager.solAcknowledged
The report gives no description here.
Show 10 more
MediumUnclear behavior in OrderManager.solAcknowledged
The report gives no description here.
MediumUnclear behavior in SpotExecutor.solAcknowledged
The report gives no description here.
MediumUnclear behavior in UnderlyingPositionFactory.solAcknowledged
The report gives no description here.
MediumUnclear behavior in Validations.solAcknowledged
The report gives no description here.
LowBad datatype in Contango.solAcknowledged
The report gives no description here.
LowBad datatype in Maestro.solAcknowledged
The report gives no description here.
LowBad datatype in Maestro.solAcknowledged
The report gives no description here.
LowBad datatype in OrderManager.solAcknowledged
The report gives no description here.
LowBad datatype in OrderManager.solAcknowledged
The report gives no description here.
LowBad datatype in OrderManager.solAcknowledged
The report gives no description here.
Show 10 more
LowBad datatype in OrderManager.solAcknowledged
The report gives no description here.
LowBad datatype in OrderManagerArbitrum.solAcknowledged
The report gives no description here.
LowBad datatype in OrderManagerOptimism.solAcknowledged
The report gives no description here.
LowBad datatype in PositionNFT.solAcknowledged
The report gives no description here.
LowBad datatype in PositionNFT.solAcknowledged
The report gives no description here.
LowBad datatype in PositionNFT.solAcknowledged
The report gives no description here.
LowBad datatype in ReferralManager.solAcknowledged
The report gives no description here.
LowBad naming in DataTypes.solAcknowledged
The report gives no description here.
LowBad naming in ExactlyReverseLookup.solAcknowledged
The report gives no description here.
LowBad naming in IUnderlyingPositionFactory.solAcknowledged
The report gives no description here.
Show 10 more
LowBad naming in UnderlyingPositionFactory.solAcknowledged
The report gives no description here.
LowBad naming in UnderlyingPositionFactory.solAcknowledged
The report gives no description here.
LowDocumentation in Contango.solAcknowledged
The report gives no description here.
LowDocumentation in ERC20Lib.solAcknowledged
The report gives no description here.
LowDocumentation in FeeManager.solAcknowledged
The report gives no description here.
LowDocumentation in IMoneyMarket.solAcknowledged
The report gives no description here.
LowDocumentation in OrderManager.solAcknowledged
The report gives no description here.
LowDocumentation in OrderManager.solAcknowledged
The report gives no description here.
LowDocumentation in OrderManagerArbitrum.solAcknowledged
The report gives no description here.
LowDocumentation in OrderManagerOptimism.solAcknowledged
The report gives no description here.
Show 10 more
LowDocumentation in ReferralManager.solAcknowledged
The report gives no description here.
LowDocumentation in Vault.solAcknowledged
The report gives no description here.
LowProcedural in AaveMoneyMarket.solAcknowledged
The report gives no description here.
LowProcedural in AaveMoneyMarket.solAcknowledged
The report gives no description here.
LowProcedural in AaveMoneyMarket.solAcknowledged
The report gives no description here.
LowProcedural in AaveOracle.solAcknowledged
The report gives no description here.
LowProcedural in AaveOracle.solAcknowledged
The report gives no description here.
LowProcedural in Arrays.solAcknowledged
The report gives no description here.
LowProcedural in Arrays.solAcknowledged
The report gives no description here.
LowProcedural in BaseMoneyMarket.solAcknowledged
The report gives no description here.
Show 10 more
LowProcedural in BaseMoneyMarket.solAcknowledged
The report gives no description here.
LowProcedural in BitFlags.solAcknowledged
The report gives no description here.
LowProcedural in BitFlags.solAcknowledged
The report gives no description here.
LowProcedural in Contango.solAcknowledged
The report gives no description here.
LowProcedural in Contango.solAcknowledged
The report gives no description here.
LowProcedural in Contango.solAcknowledged
The report gives no description here.
LowProcedural in Contango.solAcknowledged
The report gives no description here.
LowProcedural in Contango.solAcknowledged
The report gives no description here.
LowProcedural in DataTypes.solAcknowledged
The report gives no description here.
LowProcedural in DataTypes.solAcknowledged
The report gives no description here.
Show 10 more
LowProcedural in ERC20Lib.solAcknowledged
The report gives no description here.
LowProcedural in ERC20Lib.solAcknowledged
The report gives no description here.
LowProcedural in Errors.solAcknowledged
The report gives no description here.
LowProcedural in Errors.solAcknowledged
The report gives no description here.
LowProcedural in ExactlyMoneyMarket.solAcknowledged
The report gives no description here.
LowProcedural in ExactlyMoneyMarket.solAcknowledged
The report gives no description here.
LowProcedural in ExactlyReverseLookup.solAcknowledged
The report gives no description here.
LowProcedural in ExactlyReverseLookup.solAcknowledged
The report gives no description here.
LowProcedural in ExactlyReverseLookup.solAcknowledged
The report gives no description here.
LowProcedural in FeeManager.solAcknowledged
The report gives no description here.
Show 10 more
LowProcedural in FeeManager.solAcknowledged
The report gives no description here.
LowProcedural in IFlashBorrowProvider.solAcknowledged
The report gives no description here.
LowProcedural in IFlashBorrowProvider.solAcknowledged
The report gives no description here.
LowProcedural in ImmutableBeaconProxy.solAcknowledged
The report gives no description here.
LowProcedural in ImmutableBeaconProxy.solAcknowledged
The report gives no description here.
LowProcedural in IMoneyMarket.solAcknowledged
The report gives no description here.
LowProcedural in IMoneyMarket.solAcknowledged
The report gives no description here.
LowProcedural in IMoneyMarket.solAcknowledged
The report gives no description here.
LowProcedural in IUnderlyingPositionFactory.solAcknowledged
The report gives no description here.
LowProcedural in IUnderlyingPositionFactory.solAcknowledged
The report gives no description here.
Show 10 more
LowProcedural in IUnderlyingPositionFactory.solAcknowledged
The report gives no description here.
LowProcedural in Maestro.solAcknowledged
The report gives no description here.
LowProcedural in Maestro.solAcknowledged
The report gives no description here.
LowProcedural in MathLib.solAcknowledged
The report gives no description here.
LowProcedural in MathLib.solAcknowledged
The report gives no description here.
LowProcedural in OrderManager.solAcknowledged
The report gives no description here.
LowProcedural in OrderManager.solAcknowledged
The report gives no description here.
LowProcedural in OrderManagerArbitrum.solAcknowledged
The report gives no description here.
LowProcedural in OrderManagerArbitrum.solAcknowledged
The report gives no description here.
LowProcedural in OrderManagerOptimism.solAcknowledged
The report gives no description here.
Show 10 more
LowProcedural in OrderManagerOptimism.solAcknowledged
The report gives no description here.
LowProcedural in PositionIdExt.solAcknowledged
The report gives no description here.
LowProcedural in PositionIdExt.solAcknowledged
The report gives no description here.
LowProcedural in PositionNFT.solAcknowledged
The report gives no description here.
LowProcedural in PositionNFT.solAcknowledged
The report gives no description here.
LowProcedural in PositionNFT.solAcknowledged
The report gives no description here.
LowProcedural in ReferralManager.solAcknowledged
The report gives no description here.
LowProcedural in ReferralManager.solAcknowledged
The report gives no description here.
LowProcedural in Roles.solAcknowledged
The report gives no description here.
LowProcedural in Roles.solAcknowledged
The report gives no description here.
Show 10 more
LowProcedural in SpotExecutor.solAcknowledged
The report gives no description here.
LowProcedural in SpotExecutor.solAcknowledged
The report gives no description here.
LowProcedural in UnderlyingPositionFactory.solAcknowledged
The report gives no description here.
LowProcedural in UnderlyingPositionFactory.solAcknowledged
The report gives no description here.
LowProcedural in UpgradeableBeaconWithOwner.solAcknowledged
The report gives no description here.
LowProcedural in UpgradeableBeaconWithOwner.solAcknowledged
The report gives no description here.
LowProcedural in Validations.solAcknowledged
The report gives no description here.
LowProcedural in Validations.solAcknowledged
The report gives no description here.
LowProcedural in Vault.solAcknowledged
The report gives no description here.
LowProcedural in Vault.solAcknowledged
The report gives no description here.
Show 10 more
LowProcedural in Vault.solAcknowledged
The report gives no description here.
LowSuboptimal in BitFlags.solAcknowledged
The report gives no description here.
LowSuboptimal in Contango.solAcknowledged
The report gives no description here.
LowSuboptimal in Contango.solAcknowledged
The report gives no description here.
LowSuboptimal in Contango.solAcknowledged
The report gives no description here.
LowSuboptimal in Contango.solAcknowledged
The report gives no description here.
LowSuboptimal in ERC20Lib.solAcknowledged
The report gives no description here.
LowSuboptimal in ERC20Lib.solAcknowledged
The report gives no description here.
LowSuboptimal in ERC20Lib.solAcknowledged
The report gives no description here.
LowSuboptimal in ExactlyMoneyMarket.solAcknowledged
The report gives no description here.
Show 6 more
LowSuboptimal in Maestro.solAcknowledged
The report gives no description here.
LowSuboptimal in ReferralManager.solAcknowledged
The report gives no description here.
LowSuboptimal in Vault.solAcknowledged
The report gives no description here.
LowUnclear behavior in Contango.solAcknowledged
The report gives no description here.
LowUnclear behavior in IFlashBorrowProvider.solAcknowledged
The report gives no description here.
LowUnclear behavior in Vault.solAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Contango Protocol’s security record
Contango ProtocolSecurity firm
ABDK Consulting31 projects reviewed · 64 reports · latest Jan 2026
See ABDK Consulting’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us