Celo Contracts Audit

OpenZeppelin5 Feb 2021Files named in the report

Audit · firm’s term: audit

OpenZeppelin reviewed Celo (Celo Contracts Audit) on 5 Feb 2021: 94 findings, 2 critical; 58 marked fixed, 5 acknowledged, 31 open.

2 critical findings, fixed

Open the report Open Celo’s security record

Report hosted on blog.openzeppelin.com.

Trustblock does not review code.

Findings94

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	2
High	2	0	2
Medium	8	3	11
Low	21	2	43

Medium[M01] Mint and burn functionalities can breakAcknowledged

The report gives no description here.

Medium[M01] Multiple iterations of the same transfer can occurAcknowledged

The report gives no description here.

Medium[M02] Data lengths alteration could lead to malicious transaction executionsAcknowledged

The report gives no description here.

Low[L03] Downtime slash is frontrunnableAcknowledged

The report gives no description here.

Low[L15] Stable token may not be backed up in the reserveAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (23)

packages/protocol/contracts/identity/interfaces/IRandom.sol
packages/protocol/contracts/stability/interfaces/IReserve.sol
packages/protocol/contracts/common/UsingRegistry.sol
packages/protocol/contracts/governance/LockedGold.sol
packages/protocol/contracts/governance/Governance.sol
packages/protocol/contracts/stability/Reserve.sol
packages/protocol/contracts/common/UsingPrecompiles.sol
packages/protocol/contracts/common/FractionUtil.sol
packages/protocol/contracts/identity/Attestations.sol
packages/protocol/contracts/governance/Proposals.sol
packages/protocol/contracts/governance/SlasherUtil.sol
packages/protocol/contracts/identity/Escrow.sol
packages/protocol/contracts/baklava/Freezable.sol
packages/protocol/contracts/common/interfaces/IValidators.sol
packages/protocol/contracts/governance/EpochRewards.sol
packages/protocol/contracts/common/Proxy.sol
packages/protocol/contracts/stability/SortedOracles.sol
packages/protocol/contracts/stability/interfaces/IStableToken.sol
packages/protocol/contracts/common/FixidityLib.sol
packages/protocol/contracts/governance/interfaces/IValidators.sol
packages/protocol/contracts/governance/Validators.sol
packages/protocol/contracts/stability/Exchange.sol
packages/protocol/contracts/common/Initializable.sol

Part of Celo’s security record

Celo

Audits8 audits by 2 firmsLast audit Apr 2024, by Hexens.

Critical findingsNo open critical findingsAcross the 8 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Celo’s security record

Security firm

OpenZeppelin

67 projects reviewed · 184 reports · latest Aug 2026

See OpenZeppelin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.