SpearBit V3 LP 01Sept 2025 security review
Cantina reviewed ListaDAO (SpearBit V3 LP 01Sept 2025 security review) on 17 Sep 2025: 13 findings, 0 critical; 10 marked fixed, 3 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings13
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 3 |
| Medium | 0 | 2 | 1 |
| Low | 0 | 1 | 6 |
HighBypass of nonReentrant in provide via Direct PCS V3 Position NFT TransferFixed
The report gives no description here.
HighgetLpValue misapplies decimal scaling for tokens with decimals other than 18Fixed
The report gives no description here.
HighWithdrawals and harvests fail when MasterChefV3 has insufficient CAKEFixed
The report gives no description here.
MediumLP NFTs deposited during emergency mode cannot earn rewards after normal operations resumeFixed
The report gives no description here.
LowInconsistent ownership validation for direct ERC721 transfersFixed
The report gives no description here.
LowMinor improvements to code and commentsFixed
The report gives no description here.
LowMissing max feeRate checkFixed
The report gives no description here.
LowMissing token validationFixed
The report gives no description here.
LowOverly complicated rewards calculation function can be simplifiedFixed
The report gives no description here.
LowWrong rounding direction causes protocol fees to be underestimatedFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of ListaDAO’s security record
ListaDAOSecurity firm
Cantina38 projects reviewed · 176 reports · latest Oct 2026
See Cantina’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us