Lakefront Audit
CertiK reviewed Lakefront Finance (Lakefront Audit) on 14 Sep 2022: 16 findings, 0 critical; 9 marked fixed, 4 acknowledged, 3 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Findings16
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 4 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 3 | 0 | 8 |
HighCentralization Risks in FeeManager.solAcknowledged
In the contract `FeeManager` the role `keeper` has authority over the functions shown in the diagram below. Any compromise to the `keeper` account may allow the hacker to take advantage of this authority. 
HighCentralization Risks in ShipyardVault.solAcknowledged
In the contract `ShipyardVault` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority. 
HighCentralization Risks in StrategyCurveLP.solAcknowledged
In the contract `StrategyCurveLP` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority.  In the contract `StrategyCurveLP` the role `keeper` has authority over the functions shown in the diagram below. Any compromise to the `keeper` account may allow the hacker to take advantage of this authority.  In the contract `StrategyCurveLP` the role `vault` has authority over the functions shown in the diagram below. Any compromise to the `vault` account may allow the hacker to take advantage of this authority. 
HighCentralization Risks in StratManager.solAcknowledged
In the contract `StratManager` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority.  In the contract `StratManager` the role `keeper` has authority over the functions shown in the diagram below. Any compromise to the `keeper` account may allow the hacker to take advantage of this authority.  In the contract `StratManager` the role `strategist` has authority over the functions shown in the diagram below. Any compromise to the `strategist` account may allow the hacker to take advantage of this authority. 
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (15)
- contracts/strategies/common/FeeManager.sol
- contracts/utils/GasPrice.sol
- contracts/utils/IGasPrice.sol
- contracts/interfaces/company/IShipyardVault.sol
- contracts/interfaces/curve/ICurveSwap.sol
- contracts/vaults/ShipyardVault.sol
- contracts/interfaces/common/IWrappedNative.sol
- contracts/interfaces/company/IStrategy.sol
- contracts/strategies/curve/StrategyCurveLP.sol
- contracts/helpers/ShipyardOneClickCurve.sol
- contracts/utils/GasThrottler.sol
- contracts/interfaces/curve/IGaugeFactory.sol
- contracts/interfaces/curve/IRewardsGauge.sol
- contracts/strategies/common/StratManager.sol
- contracts/interfaces/common/IUniswapRouterETH.sol
Part of Lakefront Finance’s security record
Lakefront FinanceSecurity firm
CertiK1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us