Radiant Riz Audit
OpenZeppelin reviewed Radiant (Radiant Riz Audit) on 23 Jul 2024: 49 findings, 1 critical; 35 marked fixed, 12 acknowledged, 2 open.
Report hosted on blog.openzeppelin.com.
Trustblock does not review code.
Findings49
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 1 | 3 |
| Medium | 0 | 7 | 13 |
| Low | 2 | 4 | 18 |
CriticalswapTokens Function Is UnusableFixed
The report gives no description here.
HighDuplicated Elements in Configuration Could Return the Wrong Amount During SwapsFixed
The report gives no description here.
HighOld Distributions May Still Exist After UpdatingFixed
The report gives no description here.
HighPotential Reentrancy in emergencyWithdrawFixed
The report gives no description here.
MediumDistribution Changes Can Be Delayed or PreventedFixed
The report gives no description here.
MediumErroneous Condition in _setAssetSourceFixed
The report gives no description here.
MediumErroneous Validation After Market ShutdownFixed
The report gives no description here.
MediumETH For Oracle Fees Can Be Front-RunFixed
The report gives no description here.
MediumInsufficient Checks in addPoolFixed
The report gives no description here.
MediumJunk Data May Be Returned from getAllPoolDistributionsFixed
The report gives no description here.
Show 10 more
MediumLooping Fees Can Be BypassedFixed
The report gives no description here.
MediumNative Asset Not Accounted for When SwappingFixed
The report gives no description here.
MediumOff-by-One Possible in deployFundsFixed
The report gives no description here.
MediumOrder of Operations Will Reduce Output PrecisionFixed
The report gives no description here.
MediumPossible Revert In _depositToCoreLendingPoolFixed
The report gives no description here.
MediumPotential OverflowFixed
The report gives no description here.
MediumsetAddress Could Reset Module StorageFixed
The report gives no description here.
LowDocstrings Referencing Previous AuthorsFixed
The report gives no description here.
LowIncomplete DocstringsFixed
The report gives no description here.
LowInitialization Chain Is Not CompleteFixed
The report gives no description here.
Show 10 more
LowLack of Event EmissionFixed
The report gives no description here.
LowLack of Validation on setAddressAsProxyFixed
The report gives no description here.
LowLinkage of Modules and/or Markets Can Be Altered After Becoming OperationalFixed
The report gives no description here.
LowNaming IssuesFixed
The report gives no description here.
LowOnly One Type of swapStrategyFixed
The report gives no description here.
LowPyth Feeds Exponent UncheckedFixed
The report gives no description here.
LowRegular Dependency Used Instead of UpgradeableFixed
The report gives no description here.
LowRizLeverager Could Fail During loopFixed
The report gives no description here.
Lowuint256 Casted to EnumFixed
The report gives no description here.
LowUnchecked transfer/transferFrom CallFixed
The report gives no description here.
Show 5 more
LowUnneeded WETH Functionality in RizLeveragerFixed
The report gives no description here.
LowUnsafe CastsFixed
The report gives no description here.
LowUnused ConstantFixed
The report gives no description here.
LowUnused ErrorsFixed
The report gives no description here.
LowWETH Gateway Works for Any TokenFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (30)
- IYVaultV3.sol
- BaseStrategy.sol
- DexSwapStrategy.sol
- OracleRouter.sol
- RizLeverager.sol
- IYVaultFactory.sol
- IRizLendingPool.sol
- IPyth.sol
- RizRegistry.sol
- ITokenizedStrategy.sol
- RizLendingPoolStorage.sol
- RevenueManagement.sol
- RizAToken.sol
- IRizLendingPoolAddressesProvider.sol
- IOracleRouter.sol
- Errors.sol
- IPythEvents.sol
- RizLendingPoolAddressesProvider.sol
- TokenizedStrategy.sol
- RizSafetyModule.sol
- IRizAToken.sol
- RizLendingPool.sol
- BadDebtManager.sol
- IAggregatorV2V3.sol
- RizLockZap.sol
- EmergencyWithdraw.sol
- PythStructs.sol
- YRizStrategy.sol
- RizLendingPoolConfigurator.sol
- IBaseStrategy.sol
Part of Radiant’s security record
RadiantSecurity firm
OpenZeppelin67 projects reviewed · 185 reports · latest Aug 2026
See OpenZeppelin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us