M Extensions Smart Contracts

ChainSecurityFiles named in the report

Audit

ChainSecurity reviewed M0 (M Extensions Smart Contracts) on 26 Aug 2025: 7 findings, 0 critical; all marked fixed.

No open critical findings
Open the reportOpen M0’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium004
Low002
HighMYieldFee Can Be Forced Into Insolvency if Non EarningFixed

The report gives no description here.

MediumMEarnerManager Can Be Forced Into an Irrecoverable StateFixed

The report gives no description here.

MediumRemoving MEarnerManager From the Earner List Will Make It InsolventFixed

The report gives no description here.

MediumWrapped $M V1 Is UnsupportedFixed

The report gives no description here.

MediumWrong Remaining Balance in swapOut()Fixed

The report gives no description here.

LowDisable Initializers on ImplementationFixed

The report gives no description here.

LowIncorrect earnerRate() Returned by MYieldFee When Not EarningFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (12)

  • IndexingMath.sol
  • MSpokeYieldFee.sol
  • SwapFacility.sol
  • ReentrancyLock.sol
  • src/components/Freezable.sol
  • MYieldToOne.sol
  • Blacklistable.sol
  • MEarnerManager.sol
  • UniswapV3SwapAdapter.sol
  • src/components/Blacklistable.sol
  • MExtension.sol
  • MYieldFee.sol

Part of M0’s security record

M0
Audits9 audits by 3 firmsLast audit Jun 2026, by Guardian Audits.
Critical findingsNo open critical findingsAcross the 9 reports, 3 critical findings were reported. Each is marked fixed by the firm that reported it.
Open M0’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Sep 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us