KeeperDAO Liquidity Pool and HidingVault
Quantstamp reviewed KeeperDAO Liquidity Pool and HidingVault on 3 Aug 2021: 5 findings, 0 critical; 2 marked fixed, 3 acknowledged.
Report hosted on certificate.quantstamp.com.
Trustblock does not review code.
Findings5
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 3 | 2 |
Low`mintHidingVault()` is a `payable` functionFixed
The function `mintHidingVault()` is marked as `payable`. Users may send ether erroneously.
LowOutstanding lent tokens are not considered by `migrate()`Fixed
The function `migrate()` does not take into account the outstanding tokens that were lent to adapters. While not an error in itself, this may lead to confusion or accounting issues if unnoticed by the operator. The new liquidity pool may have smaller balance than the original liquidity pool had initially. Furthermore, adapters may only repay funds to the original liquidity pool.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (12)
- hidingvault/HidingVaultNFT.sol
- hidingvault/plugins/compound/LibCompound.sol
- hidingvault/LibHidingVault.sol
- hidingvault/plugins/compound/IJITUCompound.sol
- LiquidityPool.sol
- hidingvault/plugins/compound/LibCToken.sol
- hidingvault/plugins/compound/JITUCompound.sol
- hidingvault/plugins/compound/IKCompound.sol
- hidingvault/Proxy.sol
- hidingvault/plugins/compound/KCompound.sol
- hidingvault/plugins/JITUCore.sol
- hidingvault/HidingVault.sol
Part of KeeperDAO Liquidity Pool and HidingVault’s security record
Security firm
Quantstamp236 projects reviewed · 332 reports · latest Oct 2026
See Quantstamp’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us