Chi Protocol security review

Nethermind SecurityCode version: not recorded (see the report)

Audit · firm’s term: security review

Nethermind Security reviewed Chi Protocol (Chi Protocol security review) on 22 Jul 2024: 6 findings, 1 critical; all marked fixed.

1 critical finding, fixed
Open the reportOpen Chi Protocol’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings6

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High000
Medium002
Low003

Marked Best Practices or Info by the firm. Not counted as findings.

Best PracticesChainlink’s price feeds are not using the updatedAt parameterAcknowledged

The report gives no description here.

InfoPotential for incomplete configuration of reserve assetsAcknowledged

The report gives no description here.

Best PracticesPotential locked ETH in the adapter contractsAcknowledged

The report gives no description here.

Best PracticesExternal calls to arbitrary addresses in ArbitrageV5::mint and ReserveHolderV2::depositFixed

The report gives no description here.

Best PracticesInconsistent usage of constants and the asset variable in adapter contractsFixed

The report gives no description here.

Best PracticesResidual variables in storage due to contract upgradesFixed

The report gives no description here.

Best PracticesThe Removed adapter still have unlimited approval from the ReserveHolderV2Fixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Chi Protocol’s security record

Chi Protocol
Audits2 audits by 2 firmsLast audit Jul 2024, by Nethermind Security.
Critical findingsNo open critical findingsAcross the 2 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open Chi Protocol’s security record

Security firm

Nethermind Security

57 projects reviewed · 81 reports · latest Sep 2026

See Nethermind Security’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us