Contango Core audit
ABDK Consulting reviewed Contango Protocol (Contango Core audit) on 12 Mar 2023: 84 findings, 0 critical; 52 marked fixed, 32 acknowledged.
Report hosted on GitHub.
Statuses are the security firm’s own, from this report. Trustblock does not review code.
Findings84
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 8 | 9 |
| Medium | 0 | 2 | 6 |
| Low | 0 | 22 | 37 |
HighBad naming in PositionLib.solFixed
The report gives no description here.
HighFlaw in FixedFeeModel.solFixed
The report gives no description here.
HighProcedural in IContango.solFixed
The report gives no description here.
HighProcedural in IContangoQuoter.solFixed
The report gives no description here.
HighProcedural in IContangoView.solFixed
The report gives no description here.
HighProcedural in PoolOracle.solFixed
The report gives no description here.
HighSuboptimal in PoolOracle.solFixed
The report gives no description here.
HighSuboptimal in PoolOracle.solFixed
The report gives no description here.
HighSuboptimal in PoolOracle.solFixed
The report gives no description here.
MediumOverflow/Underflow in ExecutionProcessorLib.solFixed
The report gives no description here.
Show 10 more
MediumOverflow/Underflow in PoolOracle.solFixed
The report gives no description here.
MediumOverflow/Underflow in UniswapV3Handler.solFixed
The report gives no description here.
MediumOverflow/Underflow in Yield.solFixed
The report gives no description here.
MediumUnclear behavior in PoolOracle.solFixed
The report gives no description here.
MediumUnclear behavior in UniswapV3Handler.solFixed
The report gives no description here.
LowBad datatype in Balanceless.solFixed
The report gives no description here.
LowBad datatype in Balanceless.solFixed
The report gives no description here.
LowBad datatype in ContangoBase.solFixed
The report gives no description here.
LowBad datatype in WethHandler.solFixed
The report gives no description here.
LowBad naming in ErrorLib.solFixed
The report gives no description here.
Show 10 more
LowBad naming in Yield.solFixed
The report gives no description here.
LowDocumentation in PositionLib.solFixed
The report gives no description here.
LowFlaw in DataTypes.solFixed
The report gives no description here.
LowProcedural in CashSettler.solFixed
The report gives no description here.
LowProcedural in ContangoYield.solFixed
The report gives no description here.
LowProcedural in DataTypes.solFixed
The report gives no description here.
LowProcedural in IContangoQuoter.solFixed
The report gives no description here.
LowProcedural in PermitForwarder.solFixed
The report gives no description here.
LowProcedural in PoolOracle.solFixed
The report gives no description here.
LowProcedural in PoolOracle.solFixed
The report gives no description here.
Show 10 more
LowProcedural in StorageLib.solFixed
The report gives no description here.
LowProcedural in StorageLib.solFixed
The report gives no description here.
LowProcedural in StorageLib.solFixed
The report gives no description here.
LowProcedural in UniswapV3Handler.solFixed
The report gives no description here.
LowProcedural in Yield.solFixed
The report gives no description here.
LowProcedural in YieldUtils.solFixed
The report gives no description here.
LowSuboptimal in CodecLib.solFixed
The report gives no description here.
LowSuboptimal in CodecLib.solFixed
The report gives no description here.
LowSuboptimal in CodecLib.solFixed
The report gives no description here.
LowSuboptimal in CodecLib.solFixed
The report gives no description here.
Show 10 more
LowSuboptimal in ContangoBase.solFixed
The report gives no description here.
LowSuboptimal in PoolOracle.solFixed
The report gives no description here.
LowSuboptimal in PoolOracle.solFixed
The report gives no description here.
LowSuboptimal in StorageLib.solFixed
The report gives no description here.
LowSuboptimal in StorageLib.solFixed
The report gives no description here.
LowSuboptimal in StorageLib.solFixed
The report gives no description here.
LowSuboptimal in Yield.solFixed
The report gives no description here.
LowSuboptimal in Yield.solFixed
The report gives no description here.
LowSuboptimal in Yield.solFixed
The report gives no description here.
LowSuboptimal in YieldUtils.solFixed
The report gives no description here.
Show 2 more
LowUnclear behavior in TransferLib.solFixed
The report gives no description here.
LowUnclear behavior in YieldUtils.solFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Contango Protocol’s security record
Contango ProtocolSecurity firm
ABDK Consulting31 projects reviewed · 64 reports · latest Jan 2026
See ABDK Consulting’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us