Terrace Fi audit
Audit competition · firm’s term: private contest
Sherlock reviewed Terrace (Terrace Fi audit) on 1 Jun 2024: 27 findings, 0 critical; 17 marked fixed, 10 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings27
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 6 |
| Medium | 0 | 9 | 11 |
| Low | 0 | 0 | 0 |
HighFees can be charged on a worthless token by setting up a pool on UniV2/UniV3/Balancer and appending the worthless token as the trade outputAcknowledged
The report gives no description here.
MediumFee-on-transfer token is not integrated correctlyAcknowledged
The report gives no description here.
MediumGas fee is charged too early and make sponsor lose fund when trigger setupAndTrade if there are bridging transaction includedAcknowledged
The report gives no description here.
MediumMaradona: Excess msg.value not refunded to the userAcknowledged
The report gives no description here.
MediumprevLastOutBalance/prevSwapEthBalance should not contain msg.valueAcknowledged
The report gives no description here.
MediumProtocol is incompatible with many tokens due to unsafe transfers and approvalsAcknowledged
The report gives no description here.
MediumRound-off errors during ratioBPs splits will cause dust amount to remain in the contractAcknowledged
The report gives no description here.
MediumStargateManager.bridge() when isFromEth , miss check outputTokenAcknowledged
The report gives no description here.
MediumSwap will unnecessarily revert in some cases if initial ETH -> token swap is split into multiple swapOpsAcknowledged
The report gives no description here.
MediumUsage of transfer to send eth might silently failAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Terrace’s security record
Security firm
Sherlock46 projects reviewed · 67 reports · latest Sep 2026
See Sherlock’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us