M0 M Extensions
Audit · firm’s term: security review
Guardian Audits reviewed M0 (M0 M Extensions) on 5 Aug 2025: 38 findings, 0 critical; 15 marked fixed, 23 acknowledged.
Findings38
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 2 | 2 |
| Low | 0 | 21 | 12 |
MediumMEarnerManager: Old Fee Recipient Address Not ResetAcknowledged
The report gives no description here.
MediumMYieldFee : Extension May Drift, Causing Insolvency RiskAcknowledged
The report gives no description here.
LowBlacklisted Tokens Permanently LockedAcknowledged
The report gives no description here.
LowBlacklisted Users Accrue YieldAcknowledged
The report gives no description here.
LowConsider Using UniversalRouter For SwapsAcknowledged
The report gives no description here.
LowDesign For L2 Oracle Sequencer ResilienceAcknowledged
The report gives no description here.
LowEntire Balance Swaps Between Extensions FailAcknowledged
The report gives no description here.
LowExcess Yield Can't Be ClaimedAcknowledged
The report gives no description here.
LowIMExtension Claim FunctionAcknowledged
The report gives no description here.
LowIncompatibility Of M ExtensionsAcknowledged
The report gives no description here.
Show 10 more
LowMEarnerManager: Yield Fee Rounds Against The ProtocolAcknowledged
The report gives no description here.
LowMissing Fee Recipient Check In BlacklistAcknowledged
The report gives no description here.
LowMSpokeYieldFee: Spoke Rate UpdateAcknowledged
The report gives no description here.
LowMSpokeYieldFee: Stepwise JumpsAcknowledged
The report gives no description here.
LowMYieldFee: Accruing Yield When Earning StopsAcknowledged
The report gives no description here.
LowRace Condition On Access Control ListAcknowledged
The report gives no description here.
LowRounding Creates Insolvent ScenariosAcknowledged
The report gives no description here.
LowStale balanceOf DoSAcknowledged
The report gives no description here.
LowSwap Facility Blocks ActionsAcknowledged
The report gives no description here.
LowToken Path Validation BypassedAcknowledged
The report gives no description here.
Show 3 more
LowUnbacked Extension Balance Due To RoundingAcknowledged
The report gives no description here.
LowUsers Could Own M TokensAcknowledged
The report gives no description here.
LowWhitelist Check Limits CompatibilityAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of M0’s security record
M0Security firm
Guardian Audits15 projects reviewed · 99 reports · latest Aug 2026
See Guardian Audits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us