1inch Exchange
CertiK reviewed 1inch Network (1inch Exchange) on 15 Nov 2020: 8 findings, 0 critical; 3 marked fixed, 5 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Findings8
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 1 | 0 | 0 |
| Low | 4 | 0 | 3 |
LowEmpty reason for non-Chi tokens on out-of-gas excFixed
Whenever an out-of-gas exception occurs and the user is not using a Chi token as a substitute for gas, the `reason` variable will be empty (0x).
LowNon-optimal extra ETH comparison logicFixed
The `isExtraEthAllowed` flag alludes to a "permittance" rather than an enforcement, which the `require` condition of the linked line does.
LowRedundant function calls in `swap` implementationFixed
The `swap` function in the `OneInchExchange` contract makes multiple calls to the isETH function from the `UniERC20` contract and the `isPartialFill` and `isDiscountChi` functions in the `OneInchFlags` library, which is inefficient compared to storing their results in intermediate local variables and referencing those instead.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (5)
- contracts/helpers/RevertReasonParser.sol
- contracts/OneInchFlags.sol
- contracts/GasDiscountCalculator.sol
- contracts/OneInchExchange.sol
- contracts/helpers/UniERC20.sol
Part of 1inch Network’s security record
1inch NetworkSecurity firm
CertiK1,044 projects reviewed · 1,393 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us