Aave GHO audit
ABDK Consulting reviewed Aave (Aave GHO audit) on 1 Mar 2023: 85 findings, 0 critical; 8 marked fixed, 77 acknowledged.
Findings85
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 4 | 2 |
| Medium | 0 | 6 | 1 |
| Low | 0 | 67 | 5 |
HighProcedural in ERC20.solAcknowledged
The report gives no description here.
HighSuboptimal in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
HighUnclear behavior in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
HighUnclear behavior in IERC20Mintable.solAcknowledged
The report gives no description here.
MediumOverflow/Underflow in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
MediumSuboptimal in GhoAToken.solAcknowledged
The report gives no description here.
MediumSuboptimal in GhoFlashMinter.solAcknowledged
The report gives no description here.
MediumSuboptimal in IGhoToken.solAcknowledged
The report gives no description here.
MediumUnclear behavior in GhoToken.solAcknowledged
The report gives no description here.
MediumUnclear behavior in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
Show 10 more
LowBad datatype in GhoAToken.solAcknowledged
The report gives no description here.
LowBad datatype in GhoAToken.solAcknowledged
The report gives no description here.
LowBad datatype in GhoAToken.solAcknowledged
The report gives no description here.
LowBad datatype in GhoFlashMinter.solAcknowledged
The report gives no description here.
LowBad datatype in GhoFlashMinter.solAcknowledged
The report gives no description here.
LowBad datatype in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowBad datatype in IGhoAToken.solAcknowledged
The report gives no description here.
LowBad datatype in IGhoAToken.solAcknowledged
The report gives no description here.
LowBad datatype in IGhoAToken.solAcknowledged
The report gives no description here.
LowBad datatype in IGhoFacilitator.solAcknowledged
The report gives no description here.
Show 10 more
LowBad datatype in IGhoFlashMinter.solAcknowledged
The report gives no description here.
LowBad datatype in IGhoToken.solAcknowledged
The report gives no description here.
LowBad datatype in IGhoToken.solAcknowledged
The report gives no description here.
LowBad datatype in IGhoToken.solAcknowledged
The report gives no description here.
LowBad datatype in IGhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowBad datatype in IGhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowBad datatype in IGhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowBad naming in ERC20.solAcknowledged
The report gives no description here.
LowBad naming in GhoFlashMinter.solAcknowledged
The report gives no description here.
LowBad naming in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
Show 10 more
LowBad naming in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowBad naming in IGhoAToken.solAcknowledged
The report gives no description here.
LowBad naming in IGhoFacilitator.solAcknowledged
The report gives no description here.
LowBad naming in IGhoFlashMinter.solAcknowledged
The report gives no description here.
LowBad naming in IGhoToken.solAcknowledged
The report gives no description here.
LowBad naming in IGhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowOverflow/Underflow in GhoToken.solAcknowledged
The report gives no description here.
LowProcedural in ERC20.solAcknowledged
The report gives no description here.
LowProcedural in ERC20.solAcknowledged
The report gives no description here.
LowProcedural in ERC20.solAcknowledged
The report gives no description here.
Show 10 more
LowProcedural in GhoAToken.solAcknowledged
The report gives no description here.
LowProcedural in GhoDiscountRateStrategy.solAcknowledged
The report gives no description here.
LowProcedural in GhoFlashMinter.solAcknowledged
The report gives no description here.
LowProcedural in GhoInterestRateStrategy.solAcknowledged
The report gives no description here.
LowProcedural in GhoOracle.solAcknowledged
The report gives no description here.
LowProcedural in GhoOracle.solAcknowledged
The report gives no description here.
LowProcedural in GhoToken.solAcknowledged
The report gives no description here.
LowReadability in GhoDiscountRateStrategy.solAcknowledged
The report gives no description here.
LowSuboptimal in ERC20.solAcknowledged
The report gives no description here.
LowSuboptimal in GhoAToken.solAcknowledged
The report gives no description here.
Show 10 more
LowSuboptimal in GhoAToken.solAcknowledged
The report gives no description here.
LowSuboptimal in GhoAToken.solAcknowledged
The report gives no description here.
LowSuboptimal in GhoAToken.solAcknowledged
The report gives no description here.
LowSuboptimal in GhoToken.solAcknowledged
The report gives no description here.
LowSuboptimal in GhoToken.solAcknowledged
The report gives no description here.
LowSuboptimal in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowSuboptimal in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowSuboptimal in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowSuboptimal in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowSuboptimal in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
Show 10 more
LowSuboptimal in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowSuboptimal in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowSuboptimal in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowSuboptimal in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowSuboptimal in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowSuboptimal in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowSuboptimal in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowSuboptimal in IGhoFacilitator.solAcknowledged
The report gives no description here.
LowSuboptimal in IGhoFlashMinter.solAcknowledged
The report gives no description here.
LowSuboptimal in IGhoToken.solAcknowledged
The report gives no description here.
Show 7 more
LowSuboptimal in IGhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowSuboptimal in IGhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowSuboptimal in IGhoVariableDebtToken.solAcknowledged
The report gives no description here.
LowUnclear behavior in ERC20.solAcknowledged
The report gives no description here.
LowUnclear behavior in GhoAToken.solAcknowledged
The report gives no description here.
LowUnclear behavior in GhoFlashMinter.solAcknowledged
The report gives no description here.
LowUnclear behavior in GhoVariableDebtToken.solAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Aave’s security record
AaveSecurity firm
ABDK Consulting31 projects reviewed · 64 reports · latest Jan 2026
See ABDK Consulting’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us