Radiant V2 Audit
OpenZeppelin reviewed Radiant (Radiant V2 Audit) on 18 Oct 2023: 62 findings, 1 critical; 55 marked fixed, 7 acknowledged.
Report hosted on blog.openzeppelin.com.
Trustblock does not review code.
Findings62
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 5 |
| Medium | 0 | 2 | 13 |
| Low | 0 | 5 | 36 |
CriticalEligibility Manipulation Leads to Stolen RewardsFixed
The report gives no description here.
HighBounty Hunters Can Incur a Denial-of-ServiceFixed
The report gives no description here.
HighIncorrect Accounting of earned and unlocked Tokens on exit May Brick the ProtocolFixed
The report gives no description here.
HighInitial Liquidity Can Be Lost by Front-Running Pool InitializationFixed
The report gives no description here.
HighRDNT Token Bridge Fee Can Be BypassedFixed
The report gives no description here.
HighVested RDNT Tokens Can Be Withdrawn Early With No PenaltiesFixed
The report gives no description here.
MediumIncomplete Validation of Chainlink Price DataFixed
The report gives no description here.
MediumIncorrect Calculation of Tokens to Burn on withdrawFixed
The report gives no description here.
MediumIncorrect Earnings Accounting When ChefIncentivesController Reserve Is EmptyFixed
The report gives no description here.
MediumIncorrect Leveraged Borrow CalculationFixed
The report gives no description here.
Show 10 more
MediumIncorrect Usage of Uniswap V2 OracleFixed
The report gives no description here.
MediumLack of Event EmissionFixed
The report gives no description here.
MediumLeveraged Positions May Receive Reduced Reward EmissionsFixed
The report gives no description here.
MediumLoss of RDNT Rewards When CompoundingFixed
The report gives no description here.
MediumMissing PriceProvider Oracle UpdatesFixed
The report gives no description here.
MediumMissing whenNotPaused ModifierFixed
The report gives no description here.
MediumPossible Denial-of-Service for CompoundingFixed
The report gives no description here.
MediumSlippage Tolerances May Be Too LargeFixed
The report gives no description here.
MediumUse of Deprecated Chainlink FunctionFixed
The report gives no description here.
LowAssets With More Than 18 Decimals Not Supported for ZappingFixed
The report gives no description here.
Show 10 more
LowCommented-Out CodeFixed
The report gives no description here.
LowDuplicate Emission Schedules Are AllowedFixed
The report gives no description here.
LowDuplicated CodeFixed
The report gives no description here.
LowFlawed lastEligibleTime FunctionFixed
The report gives no description here.
LowInconsistent Amount Calculation When Providing LiquidityFixed
The report gives no description here.
LowInconsistent Use of Named Return ValuesFixed
The report gives no description here.
LowIncorrect Bounty Returned When BountyManager Reserve Is LowFixed
The report gives no description here.
LowIncorrect Event EmissionFixed
The report gives no description here.
LowIncorrect Fee Returned in Case Compounding Is Not Being ExecutedFixed
The report gives no description here.
LowIncorrect Input ValidationFixed
The report gives no description here.
Show 10 more
LowIncorrect or Inconsistent Error TypesFixed
The report gives no description here.
LowIncorrect Use of AssertFixed
The report gives no description here.
LowIncorrect Value Used for Slippage CalculationsFixed
The report gives no description here.
LowInvalid Reward Tokens Can Brick Reward ClaimingFixed
The report gives no description here.
LowLack of Access Control for LiquidityZap Contract InitializationFixed
The report gives no description here.
LowLack of Access Control on Pool Helper swapToWeth FunctionsFixed
The report gives no description here.
LowLack of gap Variable in Base ContractFixed
The report gives no description here.
LowLack of Input ValidationFixed
The report gives no description here.
LowLocked ETH in ContractsFixed
The report gives no description here.
LowLockZap Does Not Correctly Enforce Maximum Borrowing PowerFixed
The report gives no description here.
Show 10 more
LowLogic Contracts Initialization Is AllowedFixed
The report gives no description here.
LowMisleading Naming for Variables and FunctionsFixed
The report gives no description here.
LowMissing Error Message in require StatementFixed
The report gives no description here.
LowMissing or Incorrect DocstringsFixed
The report gives no description here.
LowMissing Slippage Protection for Direct ZappingFixed
The report gives no description here.
LowMissing Zero Address ChecksFixed
The report gives no description here.
LowRDNT Bridge Fee Is Being OverchargedFixed
The report gives no description here.
LowShadowed initialized VariableFixed
The report gives no description here.
LowTokens May Get Stuck in Compounder ContractFixed
The report gives no description here.
LowUnchecked ERC-20 Return ValueFixed
The report gives no description here.
Show 5 more
LowUnnecessary access control and incorrect mutabilityFixed
The report gives no description here.
LowUnnecessary Truncation of Balancer LP Total SupplyFixed
The report gives no description here.
LowUnsafe ABI EncodingFixed
The report gives no description here.
LowUsage of Insecure Approval FunctionsFixed
The report gives no description here.
LowUse of Hard-Coded ValuesFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (23)
- BaseOracle.sol
- Compounder.sol
- EligibilityDataProvider.sol
- ChefIncentivesController.sol
- LockerList.sol
- StargateBorrow.sol
- UniswapPoolHelper.sol
- BountyManager.sol
- AddressPagination.sol
- MiddleFeeDistribution.sol
- LockZap.sol
- UniV3TwapOracle.sol
- ChainlinkV3Adapter.sol
- RadiantOFT.sol
- wstethOracle.sol
- UniV2TwapOracle.sol
- PriceProvider.sol
- LiquidityZap.sol
- Migration.sol
- MultiFeeDistribution.sol
- BalancerPoolHelper.sol
- Leverager.sol
- DustRefunder.sol
Part of Radiant’s security record
RadiantSecurity firm
OpenZeppelin67 projects reviewed · 185 reports · latest Aug 2026
See OpenZeppelin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us