CertiK reviewed Optix Protocol (Optix) on 14 Nov 2022: 13 findings, 0 critical; 8 marked fixed, 1 acknowledged, 4 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 4 | 0 | 7 |
In the contract `OptionsERC721`, the role `DEFAUL_ADMIN_ROLE` has authority over the following functions: - `setProtocolFee()` - `setProtocolFeeRecipient()` - `setProtocolFeeCalc()` - `setReferrals()` - `setAutoExercisePeriod()` - `grantRole()` - `revokeRole()` Any compromise to the `DEFAUL_ADMIN_ROLE` account may allow a hacker to take advantage of this authority and drastically change the contract state. In the contract `OptionsVaultERC20`, the role `VAULT_OPERATOR_ROLE` has authority over the following functions: - `setVaultFee()` - `setWithdrawDelayPeriod()` - `setWithdrawDelayPeriodLockedImmutable()` - `setLPWhitelistOnly()` - `setLPWhitelistOnlyImmutable()` - `setMaxInvest()` - `grantLPWhitelistRole()` - `revokeLPWhitelistRole()` - `grantBuyerWhitelistRole()` - `revokeBuyerWhitelistRole()` - `setBuyerWhitelistOnly()` - `setBuyerWhitelistOnlyImmutable()` - `setReadOnly()` - `setVaultFeeCalc()` - `setVaultFeeCalcLockedImmutable()` - `setIpfsHash()` - `setOracleEnabled()` - `setOracleEnabledLockedImmutable()` - `grantVaultOperatorRole()` - `revokeVaultOperatorRole()` Any compromise to the `VAULT_OPERATOR_ROLE` account may allow a hacker to take advantage of this authority and drastically change the contract state In the contract `OptionsVaultFactory`, the role `DEFAULT_ADMIN_ROLE` has authority over the following functions: - `setCreateVaultIsPermissionlessImmutable()` - `setOracleIsPermissionlessImmutable()` - `setCollateralTokenIsPermissionlessImmutable()` - `setOracleWhitelisted()` - `setCollateralTokenWhitelisted()` - `grantRole()` - `revokeRole()` Any compromise to the `DEFAULT_ADMIN_ROLE` account may allow a hacker to take advantage of this authority and drastically change the contract state. In the contract `OptionsVaultFactory`, the role `COLLATERAL_RATIO_ROLE` has authority over the following function: - `setCollateralizationRatio()` Any compromise to the `COLLATERAL_RATIO_ROLE` account may allow a hacker to take advantage of this authority andchange the collateral ratio of certain contract addresses, affecting their functionality. In the contract `Refferals`, the role `DEFAULT_ADMIN_ROLE` has authority over the following functions: - `setReferralFeeRecipient()` - `setBlacklisted()` - `setBlacklistedAll()` - `grantRole()` - `revokeRole()` Any compromise to the `DEFAULT_ADMIN_ROLE` account may allow a hacker to take advantage of this authority and drastically change the contract state. In the contract `Refferals`, the role `CONTRACT_CALLER_ROLE` has authority over the following functions: - `captureReferral()` Any compromise to the `CONTRACT_CALLER_ROLE` account may allow a hacker to take advantage of this authority and change the referrals of accounts after the referral period is over.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (7)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us