Balancer Finance

Off-Chain (Private)

Audited on 2020/04/30

No active critical issues

Summary

Executive Summary In April 2020, Balancer asked us to conduct a security assessment of Balancer Finance - Balancer core: an automated portfolio manager, liquidity provider, and price sensor. We performed this assessment from May 4 to May 15, 2020. The assessment primarily focused on the high-level logic of balancer-core: BPool. The engagement was conducted by Alexander Wade and Shayan Eskandari, the total effort spent was 4 person-weeks. Scope Our review focused on the commit hash 5d70da92b1bebaa515254d00a9e064ecac9bd18e.

Project

Balancer

Multi-Chain

Issues (14)

	Low	Medium	High	Critical	Total
Not fixed	13	1	-	-	14
Fixed	-	-	-	-	0
Total	13	1	0	0	14

Contracts (7)

#	File Name
1	contracts/BColor.sol
2	contracts/BFactory.sol
3	contracts/BConst.sol
4	contracts/BMath.sol
5	contracts/BPool.sol
6	contracts/BToken.sol
7	contracts/BNum.sol

#	File Name
1	contracts/BColor.sol
2	contracts/BFactory.sol
3	contracts/BConst.sol
4	contracts/BMath.sol
5	contracts/BPool.sol
6	contracts/BToken.sol
7	contracts/BNum.sol

Balancer Finance

Summary

Issues (14)

Similar token-to-token swap methods can yield very different resultsnot_fixed/medium

Commented code exists in BMathnot_fixed/low

Consider implementing a minimum _totalWeight for unbind and rebindnot_fixed/low

Disallow self-bound poolsnot_fixed/low

Ensure bound and rebound token values are exactly correctnot_fixed/low

Contracts (7)