Bridge Mutual
Consensys reviewed Bridge Mutual on 1 Mar 2021: 34 findings, 7 critical; 20 marked fixed, 14 open.
Report hosted on diligence.security.
Trustblock does not review code.
Findings34
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 1 | 0 | 6 |
| High | 4 | 0 | 3 |
| Medium | 6 | 0 | 7 |
| Low | 3 | 0 | 4 |
CriticalA liquidity provider can withdraw all his funds anytimeFixed
The report gives no description here.
CriticalAnyone is able to mint NFTs by calling mintNFTsForLMFixed
The report gives no description here.
CriticalLiquidity providers can create deficit of DAI tokensFixed
The report gives no description here.
CriticalProfit and loss distribution mechanism is not workingFixed
The report gives no description here.
CriticalRe-entrancy issue for ERC1155Fixed
The report gives no description here.
CriticalThe buyPolicyFor/addLiquidityFor should transfer funds from msg.senderFixed
The report gives no description here.
High_updateWithdrawalQueue can run out of gasFixed
The report gives no description here.
HighDAI is assumed to have the same price as DAIx in the staking contractFixed
The report gives no description here.
HighLiquidityMining can’t accept single ERC1155 tokensFixed
The report gives no description here.
MediumPremium is payed instantly to the liquidity providersFixed
The report gives no description here.
Show 10 more
MediumThe _removeFromQueue is very gas greedyFixed
The report gives no description here.
MediumThe PolicyBook should make DAI transfers inside the contractFixed
The report gives no description here.
MediumThe totalCoverTokens is only updated when the policy is boughtFixed
The report gives no description here.
MediumThe withdrawal queue is only updated when the liquidity is addedFixed
The report gives no description here.
MediumUnbounded loops in LiquidityMiningFixed
The report gives no description here.
MediumWithdrawal with zero amount is possibleFixed
The report gives no description here.
LowComputing the quote should be done for a positive amount of tokensFixed
The report gives no description here.
LowMethods return values that are never usedFixed
The report gives no description here.
LowOptimize gas usage when checking max length of arraysFixed
The report gives no description here.
LowSave some gas when looping over state arraysFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Bridge Mutual’s security record
Bridge MutualSecurity firm
Consensys41 projects reviewed · 59 reports · latest Oct 2024
See Consensys’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us