Skate security review

Nethermind Security16 Sep 2025Code version: not recorded (see the report)

Audit · firm’s term: security review

Nethermind Security reviewed Skate (Skate security review) on 16 Sep 2025: 13 findings, 3 critical; all marked fixed.

3 critical findings, fixed

Open the report Open Skate’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings13

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	3
High	0	0	7
Medium	0	0	1
Low	0	0	2

CriticalInsecure validation in PeripheryEventEmitter allows off-chain backend to be deceivedFixed

The report gives no description here.

CriticalMissing authorization check in update_pool_config(...) allows full drain of funds from periphery poolsFixed

The report gives no description here.

CriticalRace condition in removeStagedAssets allows for theft of any staged assetsFixed

The report gives no description here.

HighInconsistent extraData normalization leads to potential loss of fundsFixed

The report gives no description here.

HighIncorrect decimal normalization in swap leads to bypassed slippage protectionFixed

The report gives no description here.

HighIncorrect liquidity recalculation leads to loss of fundsFixed

The report gives no description here.

HighIneffective Slippage Protection and Denial of Service for Exact-Output SwapsFixed

The report gives no description here.

HighRounding in favor of the user in normalize_amount_for_transfer leads to periphery pool insolvencyFixed

The report gives no description here.

HighSwap logic incorrectly handles exact output swaps leading to failed slippage protectionFixed

The report gives no description here.

HighThe initialize_tokens instruction lacks access control and validationFixed

The report gives no description here.

Show 3 more

MediumUnsafe usage of ERC-20 token transfer functionsFixed

The report gives no description here.

LowDust amounts will get stuck in PeripheryPool contractsFixed

The report gives no description here.

LowExact output swaps may revert unexpectedly when a price limit is reachedFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Skate’s security record

Skate

Audits1 audit by 1 firmLast audit Sep 2025, by Nethermind Security.

Critical findingsNo open critical findingsIn that report, 3 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Skate’s security record

Security firm

Nethermind Security

57 projects reviewed · 81 reports · latest Sep 2026

See Nethermind Security’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.