Balancer V3
Audit · firm’s term: security assessment & formal verification · Includes formal verification
Certora reviewed Balancer (Balancer V3) on 19 Sep 2024: 10 findings, 2 critical; 9 marked fixed, 1 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings23
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 3 |
| Low | 0 | 1 | 3 |
Marked Informational by the firm. Not counted as findings.
InformationalFees not included in PoolBalanceChanged event for add and remove liquidityOpen
The report gives no description here.
InformationalHooksConfigLib - Amounts ignored when enableHookAdjustedAmounts is falseOpen
The report gives no description here.
InformationalIn withdrawProtocolFees 1 bad token in pool can block fee collection of other tokens in the poolOpen
The report gives no description here.
InformationalInconsistent function naming PoolConfigLib requireRemoveCustomLiquidity Enabled and requireAddCustomLiquidityEna bledOpen
The report gives no description here.
InformationalIncorrect comment in VaultExtension getPoolConfigOpen
The report gives no description here.
InformationalIncorrect comments in FixedPoint.sol MulDivUp + mulUpOpen
The report gives no description here.
InformationalIncorrect natSpec in VaultCommon.sol:_findTokenIn dexOpen
The report gives no description here.
InformationalLots of duplicate code between VaultAdmin initializeBuffer and addLiquidityToBufferOpen
The report gives no description here.
InformationalNo custom error for tokens > 18 decimalsOpen
The report gives no description here.
InformationalNo support for ERC4626 buffers with Fee or slippageOpen
The report gives no description here.
Show 3 more
InformationalRouterCommon unnecessarily approves WETH to the vaultOpen
The report gives no description here.
InformationalSuggestion for VaultExplorerOpen
The report gives no description here.
InformationalUnnecessary self approval in Router.queryRemoveLiquidityH ookOpen
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Balancer’s security record
BalancerSecurity firm
Certora29 projects reviewed · 56 reports · latest Aug 2026
See Certora’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us