Carmine security review

Nethermind Security8 Jan 2024Code version: not recorded (see the report)

Audit · firm’s term: security review

Nethermind Security reviewed Carmine Finance (Carmine security review) on 8 Jan 2024: 12 findings, 2 critical; all marked fixed.

2 critical findings, fixed

Open the report Open Carmine Finance’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings12

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	2
High	0	0	3
Medium	0	0	4
Low	0	0	3

Marked Best Practices or Info by the firm. Not counted as findings.

Best PracticesMerge two consecutive checks into oneAcknowledged

The report gives no description here.

Best PracticesInconsistent check of return value for transfer(...) and transferFrom(...) functionsFixed

The report gives no description here.

InfoIncorrect assertion statementFixed

The report gives no description here.

Best PracticesIncorrect commentsFixed

The report gives no description here.

InfoIncorrect value of capital_transfered emitted in eventsFixed

The report gives no description here.

InfoLoss of precision when converting from new types to legacy types could cause incorrect storage writesFixed

The report gives no description here.

InfoOnly governance can halt trading, defeating its purposeFixed

The report gives no description here.

Best PracticesUnnecessary check of contract address and callerFixed

The report gives no description here.

InfoUnnecessary logic in the function expire_option_token_for_pool(...)Fixed

The report gives no description here.

Best PracticesUnnecessary Option type returnFixed

The report gives no description here.

Show 6 more

Best PracticesUnnecessary type castingFixed

The report gives no description here.

Best PracticesUnnecessary write to storage during migrationFixed

The report gives no description here.

InfoUnused variablesFixed

The report gives no description here.

Best PracticesUse standard traits for type conversionsFixed

The report gives no description here.

InfoView method can change the contract stateFixed

The report gives no description here.

InfoWrong storage type conversionFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Carmine Finance’s security record

Carmine Finance

Audits1 audit by 1 firmLast audit Jan 2024, by Nethermind Security.

Critical findingsNo open critical findingsIn that report, 2 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Carmine Finance’s security record

Security firm

Nethermind Security

57 projects reviewed · 81 reports · latest Sep 2026

See Nethermind Security’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.