Naos-Formation

QuantstampFiles named in the report

Audit

Quantstamp reviewed NAOS (Naos-Formation) on 28 May 2021: 16 findings, 0 critical; 12 marked fixed, 3 acknowledged, 1 open.

No open critical findings
Open the reportOpen NAOS’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings16

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium111
Low0211
MediumPossible to migrate to the same adapterOpen

Using `migrate()` to invoke `_updateActiveVault()` may add add the same adapter multiple times. This would cause accounting errors between Formation and the adapter. While the `migrate()` function is limited to the governance, checks should be in place to prevent incorrect behaviour.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (27)

  • contracts/interfaces/ICurveMetaFactory.sol
  • contracts/interfaces/IERC20Burnable.sol
  • contracts/interfaces/IYearnController.sol
  • contracts/interfaces/IMintableERC20.sol
  • contracts/interfaces/ITransmuter.sol
  • contracts/interfaces/IyVaultV2.sol
  • contracts/mocks/YearnVaultMock.sol
  • contracts/Transmuter.sol
  • contracts/MultiSigWalletWithTimelock.sol
  • contracts/StakingPools.sol
  • contracts/libraries/formation/CDP.sol
  • contracts/adapters/YearnVaultAdapter.sol
  • contracts/mocks/VaultAdapterMock.sol
  • contracts/NAOSToken.sol
  • contracts/mocks/ERC20Mock.sol
  • contracts/interfaces/IDetailedERC20.sol
  • contracts/libraries/pools/Stake.sol
  • contracts/MultiSigWallet.sol
  • contracts/libraries/pools/Pool.sol
  • contracts/NToken.sol
  • contracts/interfaces/IChainlink.sol
  • contracts/Formation.sol
  • contracts/libraries/formation/Vault.sol
  • contracts/interfaces/IYearnVault.sol
  • contracts/mocks/YearnControllerMock.sol
  • contracts/interfaces/IVaultAdapter.sol
  • contracts/libraries/FixedPointMath.sol

Part of NAOS’s security record

NAOS
Audits2 audits by 1 firmLast audit Nov 2021, by Quantstamp.
Critical findingsNo open critical findingsAcross 2 reports.
Open NAOS’s security record

Security firm

Quantstamp

236 projects reviewed · 332 reports · latest Oct 2026

See Quantstamp’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us