Elektrik Smart Contracts Review

ZokyoRepository at commit e93d1d7

Audit · firm’s term: smart contract review

Zokyo reviewed Elektrik (Elektrik Smart Contracts Review) on 9 Jul 2024: 28 findings, 0 critical; 16 marked fixed, 12 open.

No open critical findings
Open the reportOpen Elektrik’s security record
Report stored on IPFS. Content hash QmZ2LakuJAmhb3f75pGLMkF12MVqczGdiQeMRqWpi2248Y

Trustblock does not review code.

Findings28

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High100
Medium600
Low5016
HighFacilitators can borrow assets and never repay it backOpen

The report gives no description here.

MediumCentralization Risk Due to Overpowered OwnerOpen

The report gives no description here.

MediumfeeAmounts on orders are supposed to be optional (L12 OrderEngine.sol) meaning ordersOpen

The report gives no description here.

MediumfilledSellAmount Would Be Incorrect For Fee-On-Transfer TokensOpen

The report gives no description here.

MediumgetUsdPrice WILL NOT WORK WITH COMPLEX/LARGE PATHSOpen

The report gives no description here.

MediumMissing Handling for Tokens with Transfer Fees in fillOrders()Open

The report gives no description here.

MediumTWAP CAN BE MANIPULATED IF THE PERIOD IS SHORT ENOUGHOpen

The report gives no description here.

LowLack of input validation in or() and and() functionsOpen

The report gives no description here.

LowMissing Context Header in for merkle proofOpen

The report gives no description here.

LowTemporary DOS if one order contained a blacklisted addressOpen

The report gives no description here.

Show 2 more
LowUninitialized minimumFee and Ability to Set minimumFee to ZeroOpen

The report gives no description here.

LowUSE A MULTISIG ACCOUNT FOR THE OWNEROpen

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (14)

  • https://github.com/BlockApex/Elektrik-V2-Contracts//src/libraries/OrderEngine.sol at commit e93d1d7a59f07aa69b9e7ed75348acba5da5644c
  • https://github.com/BlockApex/Elektrik-V2-Contracts//src/Vault.sol at commit e93d1d7a59f07aa69b9e7ed75348acba5da5644c
  • https://github.com/BlockApex/Elektrik-V2-Contracts//src/libraries/Decoder.sol at commit e93d1d7a59f07aa69b9e7ed75348acba5da5644c
  • https://github.com/BlockApex/Elektrik-V2-Contracts//src/AdvancedOrderEngine.sol at commit e93d1d7a59f07aa69b9e7ed75348acba5da5644c
  • https://github.com/BlockApex/Elektrik-V2-Contracts//src/AdvancedOrderEngineErrors.sol at commit e93d1d7a59f07aa69b9e7ed75348acba5da5644c
  • https://github.com/BlockApex/Elektrik-V2-Contracts//src/Predicates.sol at commit e93d1d7a59f07aa69b9e7ed75348acba5da5644c
  • https://github.com/BlockApex/Elektrik-V2-Contracts//src/Helper/GenerateCalldata.sol at commit e93d1d7a59f07aa69b9e7ed75348acba5da5644c
  • https://github.com/BlockApex/Elektrik-V2-Contracts//src/Helper/VerifyPredicatesLogic.sol at commit e93d1d7a59f07aa69b9e7ed75348acba5da5644c
  • https://github.com/BlockApex/Elektrik-V2-Contracts//src/Helper/TargetContract.sol at commit e93d1d7a59f07aa69b9e7ed75348acba5da5644c
  • ./libraries/OracleLibraryPlus.sol
  • ./StaticOracle.sol
  • ./libraries/ClaimLib.sol
  • ./UsdOracle.sol
  • ./Airdrops.sol

Part of Elektrik’s security record

Elektrik
Audits1 audit by 1 firmLast audit Jul 2024, by Zokyo.
Critical findingsNo open critical findingsIn 1 report.
Open Elektrik’s security record

Security firm

Zokyo

89 projects reviewed · 131 reports · latest Feb 2025

See Zokyo’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us