Summer Earn Protocol

ChainSecurity14 Jan 2025Files named in the report

ChainSecurity reviewed Summer (Summer Earn Protocol) on 14 Jan 2025: 46 findings, 0 critical; 39 marked fixed, 6 acknowledged, 1 open.

No open critical findings

Open the report Open Summer’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings46

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	5
Medium	0	3	10
Low	1	3	24

MediumMissing Token Transfer in SummerVestingWalletAcknowledged

The report gives no description here.

MediumPendle's totalAssets() Jumps Over ExpiryAcknowledged

The report gives no description here.

MediumWithdrawing From Expired Markets Can Drop the Shares PriceAcknowledged

The report gives no description here.

LowBoarding AaveV3Ark Can FailAcknowledged

The report gives no description here.

LowDisembarking Can Only Take Place in Specific Market ConditionsAcknowledged

The report gives no description here.

LowRebalance Cooldown Can Be CircumventedAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (29)

packages/core-contracts/src/contracts/arks/libraries/AuctionManagerBase.sol
packages/core-contracts/src/contracts/arks/BufferArk.sol
packages/core-contracts/src/contracts/arks/libraries/StorageSlots.sol
packages/rewards-contracts/src/contracts/StakingRewardsManagerBase.sol
packages/core-contracts/src/contracts/arks/libraries/Raft.sol
packages/core-contracts/src/contracts/arks/AaveV3Ark.sol
packages/core-contracts/src/contracts/arks/libraries/ArkAccessManaged.sol
packages/core-contracts/src/contracts/FleetCommanderRewardsManager.sol
packages/core-contracts/src/utils/exchangeRateProvider/CurveExchangeRateProvider.sol
packages/core-contracts/src/utils/CooldownEnforcer/CooldownEnforcer.sol
packages/core-contracts/src/contracts/arks/libraries/Tipper.sol
packages/access-contracts/src/contracts/ProtocolAccessManager.sol
packages/access-contracts/src/contracts/ProtocolAccessManaged.sol
packages/dutch-auction/src/DutchAuctionLibrary.sol
packages/access-contracts/src/contracts/LimitedAccessControl.sol
packages/core-contracts/src/utils/exchangeRateProvider/ExchangeRateProviderBase.sol
packages/core-contracts/src/contracts/arks/libraries/FleetCommanderConfigProvider.sol
packages/core-contracts/src/contracts/arks/libraries/FleetCommanderPausable.sol
packages/core-contracts/src/contracts/arks/libraries/TipJar.sol
packages/core-contracts/src/contracts/arks/PendlePtOracleArk.sol
packages/gov-contracts/src/contracts/SummerVestingWallet.sol
packages/dutch-auction/src/DecayFunctions.sol
packages/core-contracts/src/contracts/arks/libraries/ConfigurationManaged.sol
packages/core-contracts/src/contracts/arks/libraries/ArkConfigProvider.sol
packages/dutch-auction/src/DutchAuctionMath.sol
packages/core-contracts/src/contracts/arks/libraries/FleetCommanderCache.sol
packages/core-contracts/src/contracts/arks/libraries/FleetCommander.sol
packages/core-contracts/src/contracts/arks/AdmiralsQuarters.sol
packages/core-contracts/src/contracts/arks/libraries/Ark.sol

Part of Summer’s security record

Summer

Audits5 audits by 1 firmLast audit Jan 2025, by ChainSecurity.

Critical findingsNo open critical findingsAcross the 5 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Summer’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Sep 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.