Summer.fi Automation V2 Smart Contracts

ChainSecurityFiles named in the report

Audit · firm’s term: code assessment

ChainSecurity reviewed Summer (Summer.fi Automation V2 Smart Contracts) on 9 Aug 2023: 28 findings, 2 critical; 21 marked fixed, 6 acknowledged, 1 open.

2 critical findings, fixed
Open the reportOpen Summer’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings28

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical002
High003
Medium022
Low1414
CriticalArbitrary Actions and Storage ManipulationsFixed

The report gives no description here.

CriticalExecutor Could Draw an Unbounded Amount of CoverageFixed

The report gives no description here.

HighExecuting a DPM Command RevertsFixed

The report gives no description here.

HighRemoving Arbitrary Triggers PossibleFixed

The report gives no description here.

HighUpgrades Break AutomationBotFixed

The report gives no description here.

MediumaddRecord() Does Not UnlockFixed

The report gives no description here.

MediumPossible Reentrancy Through ExecutionFixed

The report gives no description here.

LowBad Trigger Ids EmittedFixed

The report gives no description here.

LowCommand Validation Functions Can RevertFixed

The report gives no description here.

LowContracts Do Not Extend the InterfacesFixed

The report gives no description here.

Show 10 more
LowGroup Counter Starts at 2Fixed

The report gives no description here.

LowIncorrect Argument for ApprovalGranted EventFixed

The report gives no description here.

LowLeft CommentsFixed

The report gives no description here.

LowMissing Validation in AutoTakeProfitCommandFixed

The report gives no description here.

LowRedundant ApprovalFixed

The report gives no description here.

LowRemoving Non-Callers Emits an EventFixed

The report gives no description here.

LowSpecification MismatchesFixed

The report gives no description here.

LowUnequal Array LengthsFixed

The report gives no description here.

LowUnused ImportsFixed

The report gives no description here.

LowUnused Parameter, Variable and EventFixed

The report gives no description here.

Show 1 more
LowWrong Event ArgumentFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (22)

  • contracts/adapters/AAVEAdapter.sol
  • contracts/commands/BasicSellCommand.sol
  • BotLike.sol -> IAutomationBot.sol
  • contracts/commands/BaseMPACommand.sol
  • contracts/adapters/DPMAdapter.sol
  • contracts/McdView.sol
  • contracts/commands/BasicBuyCommand.sol
  • MakerExecutableAdapter.sol
  • BasicBuyCommand.sol -> MakerBasicBuyCommandV2.sol
  • contracts/adapters/MakerAdapter.sol
  • BasicSellCommand.sol -> MakerBasicSellCommandV2.sol
  • contracts/commands/CloseCommand.sol
  • AutoTakeProfitCommand.sol -> MakerAutoTakeProfitCommandV2.sol
  • contracts/commands/AutoTakeProfitCommand.sol
  • contracts/McdUtils.sol
  • MakerAdapter.sol -> MakerSecurityAdapter.sol
  • contracts/validators/ConstantMultipleValidator.sol
  • CloseCommand.sol -> MakerStopLossCommandV2.sol
  • contracts/AutomationBotStorage.sol
  • contracts/AutomationExecutor.sol
  • contracts/AutomationBot.sol
  • contracts/ServiceRegistry.sol

Part of Summer’s security record

Summer
Audits5 audits by 1 firmLast audit Jan 2025, by ChainSecurity.
Critical findingsNo open critical findingsAcross the 5 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Summer’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Sep 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us