Retro/Thena Audit
Audit · firm’s term: audit
OpenZeppelin reviewed THENA (Retro/Thena Audit) on 26 Jun 2023: 26 findings, 1 critical; 17 marked fixed, 4 acknowledged, 5 open.
Report hosted on blog.openzeppelin.com.
Trustblock does not review code.
Findings26
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 1 | 0 | 3 |
| Medium | 1 | 2 | 6 |
| Low | 3 | 2 | 7 |
CriticalGauges Rewards Can Be Erroneously DeletedFixed
The report gives no description here.
HighGaugeExtraRewarder Accounts for Excessive RewardsFixed
The report gives no description here.
HighKilled Gauge Can Be Voted ForFixed
The report gives no description here.
HighUsers Can Be Locked From VotingFixed
The report gives no description here.
MediumGaugeExtraRewarder's Reward Rate Can Be Set to an Arbitrary ValueFixed
The report gives no description here.
Mediumgauges Mapping Cannot Be ClearedFixed
The report gives no description here.
MediumRemoving a Role Does Not Remove the Role From All UsersFixed
The report gives no description here.
MediumReward Amount in GaugeExtraRewarder Can Be OverestimatedFixed
The report gives no description here.
MediumUnfair Distribution of RewardsFixed
The report gives no description here.
MediumWrong Accounting of Extra Rewards Upon Depositing to a GaugeFixed
The report gives no description here.
Show 7 more
LowInvalid Entries Remain in _addressToRoles ArrayFixed
The report gives no description here.
LowInvalid Votes Are Counted Towards a User's Vote WeightFixed
The report gives no description here.
LowLacking Address ChecksFixed
The report gives no description here.
LowNo Events Emitted on Sensitive OperationsFixed
The report gives no description here.
LowRecover Function Can Stall Associated GaugeFixed
The report gives no description here.
LowUnsafe ABI EncodingFixed
The report gives no description here.
LowUnsigned Integer Variable Declared and Treated as a Signed IntegerFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (6)
- contracts/GaugeV2.sol
- contracts/VoterV3.sol
- contracts/GaugeExtraRewarder.sol
- contracts/PermissionsRegistry.sol
- contracts/GaugeV2_CL.sol
- V1_Deprecated_Contracts/GaugeV2.sol
Part of THENA’s security record
THENASecurity firm
OpenZeppelin67 projects reviewed · 185 reports · latest Aug 2026
See OpenZeppelin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us