REUP

CertiKFiles named in the report

Audit

CertiK reviewed REUP on 30 Jan 2023: 6 findings, 0 critical; 2 marked fixed, 4 acknowledged.

No open critical findings
Open the reportOpen REUP’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings6

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High020
Medium000
Low022
LowPotential signature malleabilityFixed

EIP-2 still allows signature malleability for `ecrecover()`. Signatures in Ethereum can be altered without the private key and remain valid.

LowUnable to claim all rewards when the contract balFixed

Users will lose part of their reward bonus when there is not enough reward token balance in the `SelfStakingERC20` contract. The maximum claimable amount is equal to the remaining balance. ```solidity=291 function sendReward(address user, uint256 amount) private { uint256 balance = rewardToken.balanceOf(address(this)); if (amount > balance) { amount = balance; } rewardToken.safeTransfer(user, amount); emit RewardPaid(user, amount); } ```

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (62)

  • contracts/Base/IBridgeRERC20.sol
  • contracts/Base/SelfStakingERC20.sol
  • contracts/Base/EIP712.sol
  • contracts/Base/IRERC20.sol
  • contracts/RECurveZapper.sol
  • contracts/Base/IRECoverable.sol
  • contracts/Base/IBridgeable.sol
  • contracts/Base/Minter.sol
  • contracts/IREUP.sol
  • contracts/Base/Dummy.sol
  • contracts/Base/IBridgeSelfStakingERC20.sol
  • contracts/Base/ICanMint.sol
  • contracts/Base/BridgeRERC20.sol
  • contracts/IRECurveZapper.sol
  • contracts/REUP.sol
  • contracts/Library/CheapSafeCall.sol
  • contracts/RECustodian.sol
  • contracts/Curve/ICurveFactory.sol
  • contracts/Base/REUSDMinterBase.sol
  • contracts/IREWardSplitter.sol
  • contracts/REBacking.sol
  • contracts/Base/Owned.sol
  • contracts/IRECurveMintedRewards.sol
  • contracts/IREBacking.sol
  • contracts/Library/StringHelper.sol
  • contracts/Base/RECoverable.sol
  • contracts/REClaimer.sol
  • contracts/Curve/ICurvePool.sol
  • contracts/REWardSplitter.sol
  • contracts/Library/CheapSafeCurve.sol
  • contracts/REStablecoins.sol
  • contracts/Base/ISelfStakingERC20.sol
  • contracts/Curve/ICurveGaugeManagerProxy.sol
  • contracts/IREStablecoins.sol
  • contracts/IREClaimer.sol
  • contracts/Base/IUpgradeableBase.sol
  • contracts/Base/IUUPSUpgradeable.sol
  • contracts/Base/IUUPSUpgradeableVersion.sol
  • contracts/REUSD.sol
  • contracts/RECurveMintedRewards.sol
  • contracts/Base/IMinter.sol
  • contracts/IRECurveBlargitrage.sol
  • contracts/Library/CheapSafeERC20.sol
  • contracts/Curve/ICurveGauge.sol
  • contracts/IREUSDMinter.sol
  • contracts/IRECustodian.sol
  • contracts/Curve/ICurveStableSwap.sol
  • contracts/Base/IREUSDMinterBase.sol
  • contracts/IREUSD.sol
  • contracts/Library/Roles.sol
  • contracts/Base/UUPSUpgradeableVersion.sol
  • contracts/REYIELD.sol
  • contracts/Base/UUPSUpgradeable.sol
  • contracts/Base/IERC20Full.sol
  • contracts/RECurveBlargitrage.sol
  • contracts/IREYIELD.sol
  • contracts/Base/IOwned.sol
  • contracts/REUSDMinter.sol
  • contracts/Base/BridgeSelfStakingERC20.sol
  • contracts/Base/RERC20.sol
  • contracts/Base/UpgradeableBase.sol
  • contracts/Base/Bridgeable.sol

Part of REUP’s security record

REUP
Audits1 audit by 1 firmLast audit Jan 2023, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open REUP’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us