Teller Finance audit
Audit competition · firm’s term: public contest
Sherlock reviewed Teller (Teller Finance audit) on 29 Apr 2024: 29 findings, 0 critical; 25 marked fixed, 4 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings29
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 2 | 10 |
| Medium | 0 | 2 | 15 |
| Low | 0 | 0 | 0 |
High_sendOrEscrowFunds will brick LCG funds causing insolvencyFixed
The report gives no description here.
HighAnyone can steal pool shares from lender group if no-revert-on-failure tokens are usedFixed
The report gives no description here.
HighburnSharesToWithdrawEarnings burns before math, causing the share value to increaseFixed
The report gives no description here.
HighDrained lender due to LenderCommitmentGroup_-Smart::acceptFundsForAcceptBid() _collateralAmount by STANDARD_EXPANSION_FACTOR multiplicationFixed
The report gives no description here.
HighIf repayLoanCallback address doesn't implement repayLoanCallback try/catch won't go into the catch and will revert the txFixed
The report gives no description here.
HighInterest rate in LenderCommitmentGroup_Smart may be easily manipulated by depositing, taking a loan and withdrawingFixed
The report gives no description here.
HighLender may not be able to close loan or get back lending token.Fixed
The report gives no description here.
HighLenderCommitmentGroup_Smart picks the wrong Uniswap price, allowing borrowing at a discount by swapping before withdrawingFixed
The report gives no description here.
HighliquidateDefaultedLoanWithIncentive can be gamed to avoid paying loans interestFixed
The report gives no description here.
HighliquidateDefaultedLoanWithIncentive sends the collateral to the wrong accountFixed
The report gives no description here.
Show 10 more
MediumAPRs are lower than they shouldFixed
The report gives no description here.
MediumBorrowers can surpass liquidityThresholdPercent and borrow to near 100% of the principalFixed
The report gives no description here.
MediumFlashRolloverLoan_G5 will fail for LenderCommitmentGroup_Smart due to CollateralManager pulling collateral from FlashRolloverLoan_G5Fixed
The report gives no description here.
MediumFlashRolloverLoan_G5 will not work for certain tokens due to not setting the approval to 0 after repaying a loanFixed
The report gives no description here.
MediumIncorrect selector in FlashRolloverLoan_G5::_acceptCommitment() does not match SmartCommitmentForwarder::acceptCommitmentWithRecipient()Fixed
The report gives no description here.
MediumIssue #497 'Add parameter to lender accept bid for MaxMarketFee' from previous audit is still presentFixed
The report gives no description here.
MediumLenderCommitmentGroup pools will have incorrect exchange rate when fee-on-transfer tokens are usedFixed
The report gives no description here.
MediumLenderCommitmentGroup_Smart does not use mulDiv when converting between token and share amounts, possibly leading to DoS or loss of fundsFixed
The report gives no description here.
MediumLenderCommitmentGroup_Smart_test:: addPrincipalToCommitmentGroup/burnSharesToWithdrawEarnings() are vulnerable to slippage attacksFixed
The report gives no description here.
MediumLenderCommitmentGroup_Smart.sol cannot deploy pools with non-string symbol() ERC20s.Fixed
The report gives no description here.
Show 5 more
MediumMissing __Ownable_init() call in LenderCommitmentGroup_Smart::initialize()Fixed
The report gives no description here.
MediumPerforming a direct multiplication in _getPriceFromSqrtX96 will overflow for some uniswap poolsFixed
The report gives no description here.
MediumThe cycle payment due may span over approx. 2 cycles and block the borrower from payingFixed
The report gives no description here.
MediumUsers can bypass auction mechanism for LenderCommitmentGroup_Smart liquidation mechanism for loans that are close to end of loanFixed
The report gives no description here.
MediumUtilization math should include liquidityThresholdPercentFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Teller’s security record
TellerSecurity firm
Sherlock46 projects reviewed · 67 reports · latest Sep 2026
See Sherlock’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us