Badger ibBTC
Quantstamp reviewed BadgerDAO (Badger ibBTC) on 5 Aug 2021: 13 findings, 0 critical; 2 marked fixed, 10 acknowledged, 1 open.
Report hosted on certificate.quantstamp.com.
Trustblock does not review code.
Findings13
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 0 |
| Medium | 1 | 3 | 1 |
| Low | 0 | 6 | 1 |
MediumFunds may be locked by peak extinctionOpen
The `redeem` function prevents extinct peaks from utilizing it. The governor may set a peak to extinct status without ensuring that all of the associated funds have already been `redeem`ed. This has the unfortunate effect of causing accounting issues as the funds will also be removed from the `totalSystemAssets` calculation, which is essential for a lot of important calculations. Whilst it may be possible to `whitelistPeak` again to bring it back to a non extinct status so that the funds can be retrieved, it will result in the other issue (QSP-3) being activated.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (17)
- contracts/interfaces/IPeak.sol
- contracts/common/AccessControlDefended.sol
- contracts/peaks/BadgerSettPeak.sol
- contracts/common/proxy/UpgradableProxy.sol
- contracts/interfaces/IbyvWbtc.sol
- contracts/peaks/BadgerYearnWbtcPeak.sol
- contracts/Core.sol
- contracts/common/proxy/IERCProxy.sol
- contracts/Zap.sol
- contracts/interfaces/ISwap.sol
- contracts/bBTC.sol
- contracts/interfaces/IbBTC.sol
- contracts/common/proxy/Proxy.sol
- contracts/interfaces/ICore.sol
- contracts/common/GuestList.sol
- contracts/interfaces/ISett.sol
- contracts/common/proxy/GovernableProxy.sol
Part of BadgerDAO’s security record
BadgerDAOSecurity firm
Quantstamp236 projects reviewed · 332 reports · latest Oct 2026
See Quantstamp’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us