CertiK reviewed Dex Finance (DEX Finance (dexVAULTS & dex ETF)) on 1 Mar 2023: 17 findings, 1 critical; 16 marked fixed, 1 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 1 | 0 | 2 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 0 | 12 |
In the contract `DexFiLPZapper` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority.  In the contract `DexFiTreasury` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority.  In the contract `DexFiVault` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority.  In the contract `DexFiVaultFactory` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority.  In the contract `DexFiVaultProfitStorage` the role `vault` has authority over the functions shown in the diagram below. Any compromise to the `vault` account may allow the hacker to take advantage of this authority.  In the contract `DexFiFarmOutsidePoolConnector` the role `vault` has authority over the functions shown in the diagram below. Any compromise to the `vault` account may allow the hacker to take advantage of this authority.  In the contract `DexShareRewardPoolConnector` the role `vault` has authority over the functions shown in the diagram below. Any compromise to the `vault` account may allow the hacker to take advantage of this authority.  In the contract `PancakeMasterPoolConnector` the role `vault` has authority over the functions shown in the diagram below. Any compromise to the `vault` account may allow the hacker to take advantage of this authority.  In the contract `DexFiETF` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority.  In the contract `DexFiETFZapper` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority.  In the contract `OwnerSourceManagement` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority.  In the contract `DexFiVaultHarvester` the role `keeper` has authority over the function `harvest()`, which harvests rewards and pays the `keeper` for the service. Any compromise to the `keeper` account may allow the hacker to take advantage of this authority. In the contract `VaultHarvesterDebtManagement` the role `harvester` has authority over the function `increaseHarvesterDebt()`, which increases the amount that needs to be paid to the `keeper` for harvesting. Any compromise to the `harvester` account may allow the hacker to take advantage of this authority. In commit [64b0850cccc1cfc1464064d63db9d235baf5f1e1](https://github.com/dexfinance-com/vaults-pro/commit/64b0850cccc1cfc1464064d63db9d235baf5f1e1), the role `_owner` is added to the contract `DexFiVaultZapper`. The role `_owner` has authority over the functions listed below: - `addTokensWhitelis
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (88)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us