Gearbox V2.
Audit · firm’s term: code assessment
ChainSecurity reviewed Gearbox (Gearbox V2.) on 15 Sep 2023: 10 findings, 0 critical; 8 marked fixed, 2 acknowledged.
Report hosted on chainsecurity.com.
Trustblock does not review code.
Findings10
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 2 |
| Low | 0 | 2 | 5 |
HighWrong WaToken DistributionFixed
The report gives no description here.
MediumCompound Adapter's redeemUnderlying() Not ExecutedFixed
The report gives no description here.
MediumInheriting ACLTrait Includes Pause/UnpauseFixed
The report gives no description here.
LowBlacklistHelper Claimable Balance Is 1 Wei offFixed
The report gives no description here.
LowInconsistent Test for Reward Token WrapperFixed
The report gives no description here.
LowMissing EventFixed
The report gives no description here.
LowQuery of Curve's Tricrypto Pool Virtual PriceFixed
The report gives no description here.
LowUniswapConnectorChecker Missing Sanity CheckFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (3)
- support/BlackListHelper.sol
- adapters/convex/* except ConvexV1_ClaimZap.sol
- oracles/curve/CurveCryptoLPPriceFeed.sol
Part of Gearbox’s security record
GearboxSecurity firm
ChainSecurity81 projects reviewed · 286 reports · latest Sep 2026
See ChainSecurity’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us