Curve & Convex Feature

ChainSecurityFiles named in the report

Audit

ChainSecurity reviewed Silo (Curve & Convex Feature) on 4 Apr 2023: 11 findings, 2 critical; 10 marked fixed, 1 acknowledged.

2 critical findings, fixed
Open the reportOpen Silo’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings16

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical002
High001
Medium001
Low016
CriticalCurve LP Oracle Is Vulnerable to Read-Only Reentrancy AttacksFixed

The report gives no description here.

CriticalCurvePriveProvider Uses the Spot PriceFixed

The report gives no description here.

HighCollateral Token Transfers Are Not Taken Into AccountFixed

The report gives no description here.

MediumMissing Shutdown LogicFixed

The report gives no description here.

LowA Metapool Could Have More Than One Nested LP TokenFixed

The report gives no description here.

LowIWrapperDepositor Not ImplementedFixed

The report gives no description here.

LowMetapool Setup Recursion Lacks Sanity CheckFixed

The report gives no description here.

LowMetapools With Two LP UnderlyingFixed

The report gives no description here.

LowMissing Events for State Modifying ActionsFixed

The report gives no description here.

LowThe Reward Integral Computation Can OverflowFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (9)

  • contracts/priceProviders/curveLPTokens/interfaces/ICurveHackyPool.sol
  • contracts/priceProviders/forwarder/ForwarderPriceProvider.sol
  • contracts/wrappers/convex/ConvexStakingWrapperSilo.sol
  • contracts/wrappers/convex/ConvexSiloWrapper.sol
  • contracts/wrappers/convex/ConvexStakingWrapperSiloFactory.sol
  • contracts/priceProviders/curveLPTokens/interfaces/ICurveReentrancyCheck.sol
  • contracts/priceProviders/curveLPTokens/peggedAssetsPools/CurveReentrancyCheck.sol
  • contracts/wrappers/convex/ConvexSiloWrapperFactory.sol
  • contracts/SiloRouterV2.sol

Part of Silo’s security record

Silo
Audits2 audits by 2 firmsLast audit Nov 2024, by Certora.
Critical findingsNo open critical findingsAcross the 2 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Silo’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Nov 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us