DEX Security Review: Mangrove Protocol Audit

Cantina3 Apr 2025Code version: not recorded (see the report)

Cantina reviewed Mangrove (DEX Security Review: Mangrove Protocol Audit) on 3 Apr 2025: 7 findings, 0 critical; 5 marked fixed, 2 acknowledged.

No open critical findings

Open the report Open Mangrove’s security record

Report hosted on cantina.xyz.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	2
Medium	0	0	2
Low	0	2	1

HighMorpho rewards can not be claimed due to missing claimRewardsForToken implementationFixed

The report gives no description here.

HighMorpho rewards cannot be claimed due to flawed integration with rewards distributorFixed

The report gives no description here.

MediumMissing slippage checks on deposits and withdrawals could result in sandwich attacksFixed

The report gives no description here.

MediumThe token balance of the ERC4626Router will return wrong balances for vaults with feesFixed

The report gives no description here.

LowRounding up in ERC4626 withdrawal can cause the withdraw funds to failFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Mangrove’s security record

Mangrove

Audits3 audits by 2 firmsLast audit Apr 2025, by Cantina.

Critical findingsNo open critical findingsAcross the 3 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.

Open Mangrove’s security record

Security firm

Cantina

37 projects reviewed · 175 reports · latest Oct 2026

See Cantina’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.