Carmine security review
Audit · firm’s term: security review
Nethermind Security reviewed Carmine Finance (Carmine security review) on 8 Jan 2024: 12 findings, 2 critical; all marked fixed.
Report hosted on GitHub.
Trustblock does not review code.
Findings12
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 0 | 3 |
| Medium | 0 | 0 | 4 |
| Low | 0 | 0 | 3 |
CriticalIncorrect calculation of locked capital because of using the wrong variableFixed
The report gives no description here.
CriticalIncorrect calculation of locked capital when burning short optionsFixed
The report gives no description here.
HighCalculation of pool expired position value skips option at index 0Fixed
The report gives no description here.
HighLiquidity pool value is incorrectly calculated due to the incorrect assumption that options are sorted by maturityFixed
The report gives no description here.
HighShadowing usable_index in the function append_to_available_options(...) permanently locks funds in old optionsFixed
The report gives no description here.
MediumIncorrect check for maximum liquidity pool balanceFixed
The report gives no description here.
MediumOwner can overwrite existing option LP tokensFixed
The report gives no description here.
MediumPool’s position is incorrectly calculatedFixed
The report gives no description here.
MediumPossible sandwich attack allows liquidity providers to earn fees without any riskFixed
The report gives no description here.
LowFunction expire_option_token(...) expires incorrect option side for the poolFixed
The report gives no description here.
Show 2 more
LowFunction pow(...) returns early for an edge caseFixed
The report gives no description here.
LowUsers cannot deposit or withdraw liquidity if an option is close to expiringFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Carmine Finance’s security record
Carmine FinanceSecurity firm
Nethermind Security57 projects reviewed · 81 reports · latest Sep 2026
See Nethermind Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us