Zivoe audit
Audit competition · firm’s term: public best efforts contest
Sherlock reviewed Zivoe (Zivoe audit) on 25 Apr 2024: 22 findings, 0 critical; 13 marked fixed, 9 acknowledged.
Findings22
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 7 |
| Medium | 0 | 9 | 6 |
| Low | 0 | 0 | 0 |
HighAnyone could call depositReward with zero reward to extend the period finish timeFixed
The report gives no description here.
Highcannot forward extra rewards from both OCY_-Convex to OCT_YDL.Fixed
The report gives no description here.
HighdepositReward() with zero amount to get reward tokens stuck in ZivoeRewards contractsFixed
The report gives no description here.
HighITO can be manipulatedFixed
The report gives no description here.
HighProtocol unable to get extra Rewards in OCY_-Convex_CFixed
The report gives no description here.
HighRevoking vesting schedule does not subtract user votes correctlyFixed
The report gives no description here.
HighUser cannot withdraw stakingToken due to incorrect calculation of _totalSupplyFixed
The report gives no description here.
MediumdistributeYield() calls earningsTrancheuse() with outdated emaSTT & emaJTT while calculating senior & junior tranche yield distributionsFixed
The report gives no description here.
MediumEMA Data Point From Unlock Is DiscardedFixed
The report gives no description here.
MediumForwarding yield in OCL_ZVE is possible a lot more often than the enforced 30 daysFixed
The report gives no description here.
Show 3 more
MediumOCL_ZVE::pushToLockerMulti() will revert due to incorrect assert() statements when interacting with UniswapV2Fixed
The report gives no description here.
MediumTitle: Inadequate Allowance Handling in convertAndForward Function of OCT_DAO & OCT_YDL.Fixed
The report gives no description here.
MediumZivoeYDL::distributeYield() will revert if protocolRecipients recipients length is smaller than residualRecipientsFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Zivoe’s security record
ZivoeSecurity firm
Sherlock46 projects reviewed · 67 reports · latest Sep 2026
See Sherlock’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us