Lista Dao Contracts audit
BlockSec reviewed ListaDAO (Lista Dao Contracts audit) on 3 Sep 2025: 16 findings, 0 critical; 13 marked fixed, 3 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings16
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 5 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 3 | 7 |
HighFee drainage due to insufficient validation of providers Security IssueFixed
The report gives no description here.
HighIncorrect calculation in the function _getMaxCdpWithdrawable() Security IssueFixed
The report gives no description here.
HighIncorrect sqrtPriceX96 calculation due to unhandled token decimal differences Security IssueFixed
The report gives no description here.
HighLack of decimal conversion leads to incorrect liquidation calculations Security IssueFixed
The report gives no description here.
HighReward tokens are not sent to the recipient on liquidity decrease Security IssueFixed
The report gives no description here.
MediumRewards are incorrectly calculated when one of the token0 and token1 is the rewardToken Security IssueFixed
The report gives no description here.
LowDiscrepancy between LP Token Value and LpUsd may cause auctions to fail to conclude Security IssueFixed
The report gives no description here.
LowInteraction to MasterChefV3 still enabled in emergency mode Security IssueFixed
The report gives no description here.
LowLack of handling positions’ rewards in emergency mode Security IssueFixed
The report gives no description here.
LowPotential circumvention of the pause mechanism Security IssueFixed
The report gives no description here.
Show 3 more
LowPotential DoS during emergency operations Security IssueFixed
The report gives no description here.
LowProviders did not burn ceToken and LpUsd in the function liquidation() Security IssueFixed
The report gives no description here.
LowUser liquidation record may never be deleted Security IssueFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of ListaDAO’s security record
ListaDAOSecurity firm
2 projects reviewed · 12 reports · latest Dec 2025
See BlockSec’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us