Pendle Boros Markets

ChainSecurityFiles named in the report

Audit · firm’s term: code assessment

ChainSecurity reviewed Pendle Finance (Pendle Boros Markets) on 8 Aug 2025: 12 findings, 1 critical; all marked fixed.

1 critical finding, fixed
Open the reportOpen Pendle Finance’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings12

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High001
Medium002
Low008
CriticalHigh Priced Buy Order on Empty Orderbook Can Generate Bad DebtFixed

The report gives no description here.

HighWeak Margin Check Allows Creating Bad DebtFixed

The report gives no description here.

MediumTWAP Manipulation by Orderbook ClearingFixed

The report gives no description here.

MediumUnsafe Use of Narrow Type in Inline AssemblyFixed

The report gives no description here.

LowFee Can Make Liquidations UnprofitableFixed

The report gives no description here.

LowForce Cancel Risky Users Can Be BlockedFixed

The report gives no description here.

LowforceDeleverage() Does Not Follow SpecificationFixed

The report gives no description here.

LowMain Account Has Priority When Increasing CollateralFixed

The report gives no description here.

LowMargin Rounding Allows Exiting With Open PositionsFixed

The report gives no description here.

LowNo Minimum Position Size RequirementFixed

The report gives no description here.

Show 2 more
LowPREVRANDAO Opcode Behavior on L2 ChainsFixed

The report gives no description here.

LowsignedSize Internal Method Returns Incorrect ResultFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (42)

  • contracts/core/market/MarketOffView.sol
  • contracts/core/market/settle/LibOrderIdSort.sol
  • contracts/types/Trade.sol
  • contracts/core/market/MarketOrderAndOtc.sol
  • contracts/core/market/settle/SweepProcessUtils.sol
  • contracts/lib/math/TickMath.sol
  • contracts/types/TransientOrderIdMapping.sol
  • contracts/core/market/core/CoreOrderUtils.sol
  • contracts/core/market/settle/PendingOIUtils.sol
  • contracts/core/market/orderbook/OrderBookUtils.sol
  • contracts/lib/PaymentLib.sol
  • contracts/core/market/orderbook/Tick.sol
  • contracts/core/market/findexOracle/SampleFundingRateUpkeep.sol
  • contracts/core/market/findexOracle/FIndexOracle.sol
  • contracts/core/market/margin/LiquidationViewUtils.sol
  • contracts/core/markethub/MarketHubEntry.sol
  • contracts/core/markethub/MarginManager.sol
  • contracts/lib/ArrayLib.sol
  • contracts/lib/Errors.sol
  • contracts/core/market/core/CoreStateUtils.sol
  • contracts/core/market/MarketEntry.sol
  • contracts/core/market/core/RateUtils.sol
  • contracts/core/markethub/MarketHubRiskManagement.sol
  • contracts/factory/MarketFactory.sol
  • contracts/lib/FixedWindowObservationLib.sol
  • contracts/core/markethub/MarketHub.sol
  • contracts/types/Order.sol
  • contracts/types/MarketImpliedRate.sol
  • contracts/types/RecentTradeRateLib.sol
  • contracts/core/markethub/Storage.sol
  • contracts/core/market/margin/MarginViewUtils.sol
  • contracts/types/StoredOrderIdArr.sol
  • contracts/types/createCompute.sol
  • contracts/core/market/orderbook/TickBitmap.sol
  • contracts/types/Account.sol
  • contracts/core/market/settle/ProcessUtils.sol
  • contracts/core/market/core/MarketInfoAndState.sol
  • contracts/lib/math/PMath.sol
  • contracts/core/market/MarketRiskManagement.sol
  • contracts/core/market/MarketSetAndView.sol
  • contracts/types/MarketTypes.sol
  • contracts/core/markethub/MarketHubSetAndView.sol

Part of Pendle Finance’s security record

Pendle Finance
Audits12 audits by 3 firmsLast audit Aug 2026, by WatchPug.
Critical findingsNo open critical findingsAcross the 12 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open Pendle Finance’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Sep 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us