Contango Core audit
ABDK Consulting reviewed Contango Protocol (Contango Core audit) on 12 Mar 2023: 84 findings, 0 critical; 52 marked fixed, 32 acknowledged.
Report hosted on GitHub.
Statuses are the security firm’s own, from this report. Trustblock does not review code.
Findings84
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 8 | 9 |
| Medium | 0 | 2 | 6 |
| Low | 0 | 22 | 37 |
HighBad datatype in IContangoQuoter.solAcknowledged
The report gives no description here.
HighDocumentation in Yield.solAcknowledged
The report gives no description here.
HighFlaw in WethHandler.solAcknowledged
The report gives no description here.
HighProcedural in YieldUtils.solAcknowledged
The report gives no description here.
HighSuboptimal in ContangoPositionNFT.solAcknowledged
The report gives no description here.
HighUnclear behavior in Batchable.solAcknowledged
The report gives no description here.
HighUnclear behavior in Batchable.solAcknowledged
The report gives no description here.
HighUnclear behavior in CashSettler.solAcknowledged
The report gives no description here.
MediumFlaw in PositionLib.solAcknowledged
The report gives no description here.
MediumUnclear behavior in ContangoPositionNFT.solAcknowledged
The report gives no description here.
Show 10 more
LowBad datatype in PermitForwarder.solAcknowledged
The report gives no description here.
LowBad datatype in UniswapV3Handler.solAcknowledged
The report gives no description here.
LowBad naming in Balanceless.solAcknowledged
The report gives no description here.
LowBad naming in CashSettler.solAcknowledged
The report gives no description here.
LowBad naming in ExecutionProcessorLib.solAcknowledged
The report gives no description here.
LowBad naming in PoolOracle.solAcknowledged
The report gives no description here.
LowBad naming in StorageLib.solAcknowledged
The report gives no description here.
LowBad naming in Yield.solAcknowledged
The report gives no description here.
LowProcedural in FixedFeeModel.solAcknowledged
The report gives no description here.
LowProcedural in StorageLib.solAcknowledged
The report gives no description here.
Show 10 more
LowSuboptimal in CashSettler.solAcknowledged
The report gives no description here.
LowSuboptimal in ErrorLib.solAcknowledged
The report gives no description here.
LowSuboptimal in ExecutionProcessorLib.solAcknowledged
The report gives no description here.
LowSuboptimal in IContango.solAcknowledged
The report gives no description here.
LowSuboptimal in MathLib.solAcknowledged
The report gives no description here.
LowSuboptimal in PoolOracle.solAcknowledged
The report gives no description here.
LowSuboptimal in PoolOracle.solAcknowledged
The report gives no description here.
LowSuboptimal in PositionLib.solAcknowledged
The report gives no description here.
LowSuboptimal in PositionLib.solAcknowledged
The report gives no description here.
LowSuboptimal in UniswapV3Handler.solAcknowledged
The report gives no description here.
Show 2 more
LowSuboptimal in WethHandler.solAcknowledged
The report gives no description here.
LowUnclear behavior in PoolOracle.solAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Contango Protocol’s security record
Contango ProtocolSecurity firm
ABDK Consulting31 projects reviewed · 64 reports · latest Jan 2026
See ABDK Consulting’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us