Zkswap Finance - Audit

CertiKFiles named in the report

CertiK reviewed zkSwap Finance (Zkswap Finance - Audit) on 27 Dec 2023: 6 findings, 0 critical; 1 marked fixed, 5 open.

No open critical findings
Open zkSwap Finance’s security record

The original report was removed from its address (seen 17 Oct 2026).

Trustblock does not review code.

Findings6

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High100
Medium000
Low401
LowUnchecked ERC-20 `transfer()`/`transferFrom()` CaFixed

The return values of the `transfer()` and `transferFrom()` calls in the smart contract are not checked. Some ERC-20 tokens' transfer functions return no values, while others return a bool value, they should be handled with care. If a function returns `false` instead of reverting upon failure, an unchecked failed transfer could be mistakenly considered successful in the contract. ```solidity=129 IZFPair(pair).transferFrom(msg.sender, pair, liquidity); ```

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (6)

  • contracts/core/ZFFactory.sol
  • contracts/core/ZFPair.sol
  • contracts/core/ZFRouterInternal.sol
  • contracts/core/MetadataHelper.sol
  • contracts/core/ZFRouter.sol
  • contracts/core/ZFLibrary.sol

Part of zkSwap Finance’s security record

zkSwap Finance
Audits3 audits by 3 firmsLast audit Mar 2024, by SolidProof.
Critical findingsNo open critical findingsAcross 3 reports.
Open zkSwap Finance’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us