Zivoe audit
Audit competition · firm’s term: public best efforts contest
Sherlock reviewed Zivoe (Zivoe audit) on 25 Apr 2024: 22 findings, 0 critical; 13 marked fixed, 9 acknowledged.
Findings22
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 7 |
| Medium | 0 | 9 | 6 |
| Low | 0 | 0 | 0 |
MediumDAO unable to withdraw their funds due to Convex admin actionAcknowledged
The report gives no description here.
MediumOCC_Modular::applyCombine will round APR downAcknowledged
The report gives no description here.
MediumOCL_ZVE.sol::forwardYield relies on manipulable Uniswap V2 pool reserves leading to theft of fundsAcknowledged
The report gives no description here.
MediumRewards are calculated as distributed even if there are no stakers, locking the rewards foreverAcknowledged
The report gives no description here.
MediumTime calculation issues with exponential decayAcknowledged
The report gives no description here.
MediumWhen APR late rate is lower than APR, an OCC locker bullet loan borrower can pay way less interests by calling the loanAcknowledged
The report gives no description here.
MediumZivoeTranches#rewardZVEJuniorDeposit function miscalculates the reward when the ratio traverses lower/upper bound.Acknowledged
The report gives no description here.
MediumZivoeYDL::distributeYield yield distribution is flash-loan manipulatableAcknowledged
The report gives no description here.
MediumZivoeYDL::earningsTrancheuse() always assumes that daysBetweenDistributions have passed, which might not be the caseAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Zivoe’s security record
ZivoeSecurity firm
Sherlock46 projects reviewed · 67 reports · latest Sep 2026
See Sherlock’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us