Skate security review
Audit · firm’s term: security review
Nethermind Security reviewed Skate (Skate security review) on 16 Sep 2025: 13 findings, 3 critical; all marked fixed.
Findings13
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 3 |
| High | 0 | 0 | 7 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 0 | 2 |
Marked Info or Best Practices by the firm. Not counted as findings.
InfoPotential actionId collision in collectProtocol(...)Open
The report gives no description here.
InfoFee Collection Mechanism Lacks GranularityAcknowledged
The report gives no description here.
Best PracticesUsage of tx.origin for authorization is unsafeAcknowledged
The report gives no description here.
Infogenerate_action_id(...) may return the same hash for different actionsFixed
The report gives no description here.
InfoIncorrect accounting of global staged assets in swap(...)Fixed
The report gives no description here.
Best PracticesMissing extraData validation in mint(...) and increaseLiquidity(...)Fixed
The report gives no description here.
InfoMissing Uniswap V3 standard parameters like deadline and recipientFixed
The report gives no description here.
InfoOnly NFT position owner can increase liquidityFixed
The report gives no description here.
InfoRefunded tokens from swaps are sent to the recipient addressFixed
The report gives no description here.
InfoSwap behavior deviates from Uniswap V3 regarding sqrtPriceLimitX96Fixed
The report gives no description here.
Show 10 more
InfoThe _normalizeTokenAmount(...) function does not handle decimals larger than 18Fixed
The report gives no description here.
InfoThe burn(...) function lacks a check for available liquidityFixed
The report gives no description here.
InfoThe changePeripheryPool(...) function can add new periphery poolsFixed
The report gives no description here.
InfoThe createPool function does not prevent creating a pool with identical tokensFixed
The report gives no description here.
Best PracticesThe createPool(...) function does not validate if tickSpacing is configuredFixed
The report gives no description here.
Best PracticesThe setFeeAmountTickSpacing(...) function lacks input validationFixed
The report gives no description here.
InfoThe settle_swap(...) function does not utilize the recipient for settlementFixed
The report gives no description here.
InfoThe swap(...) function does not validate the destination VM typeFixed
The report gives no description here.
InfoTokens without a decimals() function are not supportedFixed
The report gives no description here.
InfoUnsafe cast to int256 in the swap(...) functionFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Skate’s security record
SkateSecurity firm
Nethermind Security57 projects reviewed · 81 reports · latest Sep 2026
See Nethermind Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us