Harvest audit

PeckShieldNot recorded. See the report

PeckShield reviewed Harvest (Harvest audit) on 1 Oct 2020: 17 findings, 0 critical; 7 marked fixed, 9 acknowledged, 1 open.

No open critical findings
Open the reportOpen Harvest’s security record

Report hosted on GitHub.

Statuses are the security firm’s own, from this report. Trustblock does not review code.

Findings17

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High100
Medium011
Low086
MediumPossible Partial Withdrawal With withdrawAllToVault()Acknowledged

The report gives no description here.

LowAuthenticated salvage() From onlyGovernanceAcknowledged

The report gives no description here.

LowGas Optimization in withdrawToVault()Acknowledged

The report gives no description here.

LowImproved Asset Consistency Between Vaults and StrategiesAcknowledged

The report gives no description here.

LowOptimized claimAndLiquidateCrv() For Improved InvestmentAcknowledged

The report gives no description here.

LowPossible Front-Running For Reduced ReturnAcknowledged

The report gives no description here.

LowPossible Revert in withdrawToVault()Acknowledged

The report gives no description here.

LowSimplified Logic in getReward()Acknowledged

The report gives no description here.

LowSuggested Adherence of Checks-Effects-Interactions Pattern in HardRewards and VaultsAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Harvest’s security record

Harvest
Audits1 audit by 1 firmLast audit Oct 2020, by PeckShield.
Critical findingsNo open critical findingsIn 1 report.
IncidentIncident 26 Oct 2020Source: De.Fi incident database.
Open Harvest’s security record

Security firm

PeckShield

181 projects reviewed · 247 reports · latest Apr 2026

See PeckShield’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us