Salty.IO audit
ABDK Consulting reviewed Salty.IO (Salty.IO audit) on 5 Jan 2024: 228 findings, 0 critical; 72 marked fixed, 156 acknowledged.
Report hosted on GitHub.
Statuses are the security firm’s own, from this report. Trustblock does not review code.
Findings228
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 9 |
| Medium | 0 | 31 | 1 |
| Low | 0 | 125 | 62 |
HighDocumentation in PoolMath.solFixed
The report gives no description here.
HighOverflow/Underflow in PoolMath.solFixed
The report gives no description here.
HighSuboptimal in Liquidity.solFixed
The report gives no description here.
HighSuboptimal in PoolMath.solFixed
The report gives no description here.
HighUnclear behavior in Liquidity.solFixed
The report gives no description here.
HighUnclear behavior in PoolMath.solFixed
The report gives no description here.
HighUnclear behavior in PoolsConfig.solFixed
The report gives no description here.
HighUnclear behavior in PoolStats.solFixed
The report gives no description here.
HighUnclear behavior in SaltRewards.solFixed
The report gives no description here.
MediumSuboptimal in Proposals.solFixed
The report gives no description here.
Show 10 more
LowBad datatype in CoreChainlinkFeed.solFixed
The report gives no description here.
LowBad datatype in CoreChainlinkFeed.solFixed
The report gives no description here.
LowBad datatype in CoreChainlinkFeed.solFixed
The report gives no description here.
LowBad datatype in CoreChainlinkFeed.solFixed
The report gives no description here.
LowBad datatype in CoreUniswapFeed.solFixed
The report gives no description here.
LowBad datatype in CoreUniswapFeed.solFixed
The report gives no description here.
LowBad datatype in DAO.solFixed
The report gives no description here.
LowBad datatype in Pools.solFixed
The report gives no description here.
LowBad datatype in PriceAggregator.solFixed
The report gives no description here.
LowBad naming in ILiquidizer.solFixed
The report gives no description here.
Show 10 more
LowBad naming in IPoolsConfig.solFixed
The report gives no description here.
LowBad naming in IPriceAggregator.solFixed
The report gives no description here.
LowBad naming in PoolUtils.solFixed
The report gives no description here.
LowBad naming in PoolUtils.solFixed
The report gives no description here.
LowDocumentation in ArbitrageSearch.solFixed
The report gives no description here.
LowDocumentation in DAO.solFixed
The report gives no description here.
LowDocumentation in IPoolsConfig.solFixed
The report gives no description here.
LowDocumentation in IPriceFeed.solFixed
The report gives no description here.
LowDocumentation in IPriceFeed.solFixed
The report gives no description here.
LowDocumentation in PoolsConfig.solFixed
The report gives no description here.
Show 10 more
LowProcedural in CollateralAndLiquidity.solFixed
The report gives no description here.
LowProcedural in IStableConfig.solFixed
The report gives no description here.
LowReadability in ArbitrageSearch.solFixed
The report gives no description here.
LowReadability in DAOConfig.solFixed
The report gives no description here.
LowReadability in Liquidity.solFixed
The report gives no description here.
LowReadability in Liquidizer.solFixed
The report gives no description here.
LowSuboptimal in AccessManager.solFixed
The report gives no description here.
LowSuboptimal in BootstrapBallot.solFixed
The report gives no description here.
LowSuboptimal in CollateralAndLiquidity.solFixed
The report gives no description here.
LowSuboptimal in CollateralAndLiquidity.solFixed
The report gives no description here.
Show 10 more
LowSuboptimal in CoreChainlinkFeed.solFixed
The report gives no description here.
LowSuboptimal in CoreSaltyFeed.solFixed
The report gives no description here.
LowSuboptimal in CoreUniswapFeed.solFixed
The report gives no description here.
LowSuboptimal in DAO.solFixed
The report gives no description here.
LowSuboptimal in Emissions.solFixed
The report gives no description here.
LowSuboptimal in ExchangeConfig.solFixed
The report gives no description here.
LowSuboptimal in IAirdrop.solFixed
The report gives no description here.
LowSuboptimal in InitialDistribution.solFixed
The report gives no description here.
LowSuboptimal in Liquidity.solFixed
The report gives no description here.
LowSuboptimal in Liquidizer.solFixed
The report gives no description here.
Show 10 more
LowSuboptimal in Liquidizer.solFixed
The report gives no description here.
LowSuboptimal in PoolMath.solFixed
The report gives no description here.
LowSuboptimal in PoolMath.solFixed
The report gives no description here.
LowSuboptimal in Pools.solFixed
The report gives no description here.
LowSuboptimal in PoolsConfig.solFixed
The report gives no description here.
LowSuboptimal in PoolStats.solFixed
The report gives no description here.
LowSuboptimal in PoolUtils.solFixed
The report gives no description here.
LowSuboptimal in PriceAggregator.solFixed
The report gives no description here.
LowSuboptimal in Proposals.solFixed
The report gives no description here.
LowSuboptimal in RewardsEmitter.solFixed
The report gives no description here.
Show 10 more
LowSuboptimal in SaltRewards.solFixed
The report gives no description here.
LowSuboptimal in SigningTools.solFixed
The report gives no description here.
LowSuboptimal in SigningTools.solFixed
The report gives no description here.
LowSuboptimal in StakingRewards.solFixed
The report gives no description here.
LowSuboptimal in Upkeep.solFixed
The report gives no description here.
LowUnclear behavior in AccessManager.solFixed
The report gives no description here.
LowUnclear behavior in CoreChainlinkFeed.solFixed
The report gives no description here.
LowUnclear behavior in DAO.solFixed
The report gives no description here.
LowUnclear behavior in IAccessManager.solFixed
The report gives no description here.
LowUnclear behavior in IBootstrapBallot.solFixed
The report gives no description here.
Show 2 more
LowUnclear behavior in IProposals.solFixed
The report gives no description here.
LowUnclear behavior in Pools.solFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Salty.IO’s security record
Salty.IOSecurity firm
ABDK Consulting31 projects reviewed · 64 reports · latest Jan 2026
See ABDK Consulting’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us