Ondo Protocol audit
ABDK Consulting reviewed Ondo Finance (Ondo Protocol audit) on 26 Oct 2022: 191 findings, 1 critical; 72 marked fixed, 119 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings191
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 2 | 2 |
| Medium | 0 | 0 | 7 |
| Low | 0 | 117 | 62 |
HighFlaw in OndoRegistryClientInitializable.solAcknowledged
The report gives no description here.
HighSuboptimal in OndoLibrary.solAcknowledged
The report gives no description here.
LowBad datatype in AConvexAutocompounder.solAcknowledged
The report gives no description here.
LowBad datatype in AConvexAutocompounder.solAcknowledged
The report gives no description here.
LowBad datatype in AConvexAutocompounder.solAcknowledged
The report gives no description here.
LowBad datatype in AConvexAutocompounder.solAcknowledged
The report gives no description here.
LowBad datatype in AConvexAutocompounder.solAcknowledged
The report gives no description here.
LowBad datatype in AConvexAutocompounder.solAcknowledged
The report gives no description here.
LowBad datatype in AConvexAutocompounder.solAcknowledged
The report gives no description here.
LowBad datatype in AConvexAutocompounder.solAcknowledged
The report gives no description here.
Show 10 more
LowBad datatype in AConvexAutocompounder.solAcknowledged
The report gives no description here.
LowBad datatype in AConvexAutocompounder.solAcknowledged
The report gives no description here.
LowBad datatype in AConvexAutocompounder.solAcknowledged
The report gives no description here.
LowBad datatype in BalancerStrategy.solAcknowledged
The report gives no description here.
LowBad datatype in BalancerStrategy.solAcknowledged
The report gives no description here.
LowBad datatype in BalancerStrategy.solAcknowledged
The report gives no description here.
LowBad datatype in BasePairLPStrategy.solAcknowledged
The report gives no description here.
LowBad datatype in ConvexAutocompounderStrategy.solAcknowledged
The report gives no description here.
LowBad datatype in ConvexAutocompounderStrategy.solAcknowledged
The report gives no description here.
LowBad datatype in ConvexAutocompounderStrategy.solAcknowledged
The report gives no description here.
Show 10 more
LowBad datatype in IPairVault.solAcknowledged
The report gives no description here.
LowBad datatype in IPairVault.solAcknowledged
The report gives no description here.
LowBad datatype in IRollover.solAcknowledged
The report gives no description here.
LowBad datatype in IRollover.solAcknowledged
The report gives no description here.
LowBad datatype in ISingleAssetVault.solAcknowledged
The report gives no description here.
LowBad datatype in OndoLibrary.solAcknowledged
The report gives no description here.
LowBad datatype in OndoLibrary.solAcknowledged
The report gives no description here.
LowBad datatype in OndoRegistryClient.solAcknowledged
The report gives no description here.
LowBad datatype in OndoRegistryClientInitializable.solAcknowledged
The report gives no description here.
LowBad datatype in OndoRegistryClientInitializable.solAcknowledged
The report gives no description here.
Show 10 more
LowBad datatype in Registry.solAcknowledged
The report gives no description here.
LowBad datatype in SAStrategyAllPairVault.solAcknowledged
The report gives no description here.
LowBad datatype in SAStrategyAllPairVault.solAcknowledged
The report gives no description here.
LowBad datatype in SAStrategyAllPairVault.solAcknowledged
The report gives no description here.
LowBad datatype in SAStrategyConvex.solAcknowledged
The report gives no description here.
LowBad datatype in SAStrategyConvex.solAcknowledged
The report gives no description here.
LowBad datatype in SAStrategyConvex.solAcknowledged
The report gives no description here.
LowBad datatype in SAStrategyConvex.solAcknowledged
The report gives no description here.
LowBad datatype in SAStrategyRollover.solAcknowledged
The report gives no description here.
LowBad datatype in SAStrategyRollover.solAcknowledged
The report gives no description here.
Show 10 more
LowBad datatype in SAStrategyRollover.solAcknowledged
The report gives no description here.
LowBad datatype in SAStrategyRollover.solAcknowledged
The report gives no description here.
LowBad datatype in SingleAssetVault.solAcknowledged
The report gives no description here.
LowBad datatype in SingleAssetVault.solAcknowledged
The report gives no description here.
LowBad datatype in SingleAssetVault.solAcknowledged
The report gives no description here.
LowBad datatype in SingleAssetVault.solAcknowledged
The report gives no description here.
LowBad datatype in SingleAssetVault.solAcknowledged
The report gives no description here.
LowBad naming in BasePairLPStrategy.solAcknowledged
The report gives no description here.
LowBad naming in IRollover.solAcknowledged
The report gives no description here.
LowBad naming in IStrategy.solAcknowledged
The report gives no description here.
Show 10 more
LowBad naming in IWETH.solAcknowledged
The report gives no description here.
LowBad naming in SingleAssetVault.solAcknowledged
The report gives no description here.
LowDocumentation in AConvexAutocompounder.solAcknowledged
The report gives no description here.
LowDocumentation in IBaseRewardPool.solAcknowledged
The report gives no description here.
LowDocumentation in IConvexBooster.solAcknowledged
The report gives no description here.
LowDocumentation in IConvexBooster.solAcknowledged
The report gives no description here.
LowDocumentation in ICurve_2.solAcknowledged
The report gives no description here.
LowDocumentation in ICurve_3.solAcknowledged
The report gives no description here.
LowDocumentation in ISAStrategy.solAcknowledged
The report gives no description here.
LowDocumentation in OndoLibrary.solAcknowledged
The report gives no description here.
Show 10 more
LowDocumentation in OndoLibrary.solAcknowledged
The report gives no description here.
LowDocumentation in SAStrategyAllPairVault.solAcknowledged
The report gives no description here.
LowDocumentation in SingleAssetVault.solAcknowledged
The report gives no description here.
LowDocumentation in SingleAssetVault.solAcknowledged
The report gives no description here.
LowOverflow/Underflow in SingleAssetVault.solAcknowledged
The report gives no description here.
LowProcedural in AConvexAutocompounder.solAcknowledged
The report gives no description here.
LowProcedural in BalancerStrategy.solAcknowledged
The report gives no description here.
LowProcedural in BasePairLPStrategy.solAcknowledged
The report gives no description here.
LowProcedural in ConvexAutocompounderStrategy.solAcknowledged
The report gives no description here.
LowProcedural in ICurve_3.solAcknowledged
The report gives no description here.
Show 10 more
LowProcedural in IMultiex.solAcknowledged
The report gives no description here.
LowProcedural in Multiex.solAcknowledged
The report gives no description here.
LowProcedural in OndoLibrary.solAcknowledged
The report gives no description here.
LowProcedural in OndoLibrary.solAcknowledged
The report gives no description here.
LowProcedural in Registry.solAcknowledged
The report gives no description here.
LowProcedural in Registry.solAcknowledged
The report gives no description here.
LowReadability in BalancerStrategy.solAcknowledged
The report gives no description here.
LowReadability in BalancerStrategy.solAcknowledged
The report gives no description here.
LowReadability in BalancerStrategy.solAcknowledged
The report gives no description here.
LowReadability in BalancerStrategy.solAcknowledged
The report gives no description here.
Show 10 more
LowReadability in SAStrategyConvex.solAcknowledged
The report gives no description here.
LowSuboptimal in AConvexAutocompounder.solAcknowledged
The report gives no description here.
LowSuboptimal in AConvexAutocompounder.solAcknowledged
The report gives no description here.
LowSuboptimal in AConvexAutocompounder.solAcknowledged
The report gives no description here.
LowSuboptimal in BalancerStrategy.solAcknowledged
The report gives no description here.
LowSuboptimal in BalancerStrategy.solAcknowledged
The report gives no description here.
LowSuboptimal in BalancerStrategy.solAcknowledged
The report gives no description here.
LowSuboptimal in BalancerStrategy.solAcknowledged
The report gives no description here.
LowSuboptimal in BalancerStrategy.solAcknowledged
The report gives no description here.
LowSuboptimal in BasePairLPStrategy.solAcknowledged
The report gives no description here.
Show 10 more
LowSuboptimal in IRegistry.solAcknowledged
The report gives no description here.
LowSuboptimal in IRollover.solAcknowledged
The report gives no description here.
LowSuboptimal in IStrategy.solAcknowledged
The report gives no description here.
LowSuboptimal in OndoLibrary.solAcknowledged
The report gives no description here.
LowSuboptimal in OndoLibrary.solAcknowledged
The report gives no description here.
LowSuboptimal in OndoLibrary.solAcknowledged
The report gives no description here.
LowSuboptimal in OndoLibrary.solAcknowledged
The report gives no description here.
LowSuboptimal in OndoLibrary.solAcknowledged
The report gives no description here.
LowSuboptimal in OndoLibrary.solAcknowledged
The report gives no description here.
LowSuboptimal in OndoRegistryClientInitializable.solAcknowledged
The report gives no description here.
Show 10 more
LowSuboptimal in OndoRegistryClientInitializable.solAcknowledged
The report gives no description here.
LowSuboptimal in OndoRegistryClientInitializable.solAcknowledged
The report gives no description here.
LowSuboptimal in OndoRegistryClientInitializable.solAcknowledged
The report gives no description here.
LowSuboptimal in Registry.solAcknowledged
The report gives no description here.
LowSuboptimal in Registry.solAcknowledged
The report gives no description here.
LowSuboptimal in SAStrategyAllPairVault.solAcknowledged
The report gives no description here.
LowSuboptimal in SAStrategyConvex.solAcknowledged
The report gives no description here.
LowSuboptimal in SAStrategyConvex.solAcknowledged
The report gives no description here.
LowSuboptimal in SAStrategyRollover.solAcknowledged
The report gives no description here.
LowSuboptimal in SingleAssetVault.solAcknowledged
The report gives no description here.
Show 9 more
LowSuboptimal in SingleAssetVault.solAcknowledged
The report gives no description here.
LowSuboptimal in SingleAssetVault.solAcknowledged
The report gives no description here.
LowUnclear behavior in AConvexAutocompounder.solAcknowledged
The report gives no description here.
LowUnclear behavior in BalancerStrategy.solAcknowledged
The report gives no description here.
LowUnclear behavior in ConvexAutocompounderStrategy.solAcknowledged
The report gives no description here.
LowUnclear behavior in ICurve_2.solAcknowledged
The report gives no description here.
LowUnclear behavior in ICurve_3.solAcknowledged
The report gives no description here.
LowUnclear behavior in SingleAssetVault.solAcknowledged
The report gives no description here.
LowUnclear behavior in SingleAssetVault.solAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Ondo Finance’s security record
Ondo FinanceSecurity firm
ABDK Consulting31 projects reviewed · 64 reports · latest Jan 2026
See ABDK Consulting’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us