Opyn Gamma Protocol Audit
Audit · firm’s term: audit
OpenZeppelin reviewed Opyn Markets (Opyn Gamma Protocol Audit) on 10 Nov 2020: 20 findings, 1 critical; 14 marked fixed, 6 open.
Report hosted on blog.openzeppelin.com.
Trustblock does not review code.
Findings20
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 2 |
| Medium | 2 | 0 | 3 |
| Low | 4 | 0 | 8 |
Critical[C01][Fixed] An attacker can steal all the collateral assetsFixed
The report gives no description here.
High[H01][Fixed] ETH could get trapped in the protocolFixed
The report gives no description here.
High[H02][Fixed] Protocol could become insolvent due to market’s natural movementsFixed
The report gives no description here.
Medium[M01][Fixed] oToken can be created with a non-whitelisted collateral assetFixed
The report gives no description here.
Medium[M03][Fixed] Actions are undefined at the exact time of oToken expiryFixed
The report gives no description here.
Medium[M04][Fixed] Use of transfer might render ETH impossible to withdrawFixed
The report gives no description here.
Low[L01][Fixed] Disputer can dispute a price before a pricer has submitted a priceFixed
The report gives no description here.
Low[L02][Fixed] Constants are not being declared explicitlyFixed
The report gives no description here.
Low[L03][Fixed] Operations are not explicitly castedFixed
The report gives no description here.
Low[L04][Fixed] Lack of indexed parameters in eventsFixed
The report gives no description here.
Show 4 more
Low[L05][Fixed] Lack of input validation could pollute the event logsFixed
The report gives no description here.
Low[L07][Fixed] Mismatches between contracts and interfacesFixed
The report gives no description here.
Low[L09][Fixed] oToken symbols might not be uniqueFixed
The report gives no description here.
Low[L10][Fixed] String is used as hash keyFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (9)
- contracts/Oracle.sol
- contracts/libs/MarginVault.sol
- contracts/MarginCalculator.sol
- contracts/Whitelist.sol
- contracts/OtokenSpawner.sol
- contracts/AddressBook.sol
- contracts/OtokenFactory.sol
- contracts/Otoken.sol
- contracts/Controller.sol
Part of Opyn Markets’s security record
Opyn MarketsSecurity firm
OpenZeppelin67 projects reviewed · 185 reports · latest Aug 2026
See OpenZeppelin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us