Leaven Network - Audit

CertiK3 addresses on BNB Chain

CertiK reviewed Leaven Network (Leaven Network - Audit) on 29 Sep 2022: 27 findings, 0 critical; 7 marked fixed, 20 open.

No open critical findings
Open the reportOpen Leaven Network’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings27

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High200
Medium000
Low1807
LowDeclaration Naming ConventionFixed

The linked declarations do not conform to the [Solidity style guide](https://solidity.readthedocs.io/en/v0.7.3/style-guide.html#naming-conventions) with regards to its naming convention. Particularly: - `camelCase`: Should be applied to function names, argument names, local and state variable names, modifiers - `UPPER_CASE`: Should be applied to `constant` variables - `CapWords`: Should be applied to contract names, struct names, event names and enums

LowFunction Should Be Declared ExternalFixed

The functions which are never called internally within the contract should have external visibility for gas optimization.

LowLack of TestsFixed

No unit tests were provided for the contracts in scope. Testing programs are a very important aspect of proving program correctness, preventing regressions, and release engineering. Without tests, there is no way to know if the program works as expected. The fact that code was shipped for review with such major flaw, is considered a signal of some problems with release engineering procedures, which may lead to shipping not intended changes to production.

LowMissing Emit EventsFixed

There should always be events emitted in the sensitive functions that are controlled by centralization roles.

LowState Variable Should Be Declared ConstantFixed

State variables that never change should be declared as `constant` to save gas. - `gasprice` should be declared `constant`: ```solidity=1259 address public gasprice = address(0xA43509661141F254F54D9A326E8Ec851A0b95307); ```

LowTypos in Comments and CodeFixed

There are a few typos in the contract.

LowUnused EventFixed

- `Deposits` is declared in `LeavenVaultV6` but never emitted: ```solidity=1116 event Deposits(address sender, uint256 amount); ```

Contracts in scope3

AddressChainSource code
0xe96ca482eaee6113c41ccfabdc8897d3f5715d44Chain: BNB ChainSource code: Verified source
0x860e3012a005eb30e634f3bc787a36a405ac42b9Chain: BNB ChainSource code: Verified source
0x926a3741f4ae0c72fc0de7916b451d0338d3422eChain: BNB ChainSource code: Verified source

Part of Leaven Network’s security record

Leaven Network
Audits1 audit by 1 firmLast audit Sep 2022, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open Leaven Network’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us