Tidal
Consensys reviewed Tidal Finance (Tidal) on 1 May 2023: 22 findings, 3 critical; 21 marked fixed, 1 open.
Report hosted on diligence.security.
Trustblock does not review code.
Findings22
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 3 |
| High | 0 | 0 | 2 |
| Medium | 0 | 0 | 5 |
| Low | 1 | 0 | 11 |
CriticaladdPremium – A Back Runner May Cause an Insurance Holder to Lose Their Refunds by Calling addPremium Right After the Original CallFixed
The report gives no description here.
CriticaladdTidal, _updateUserTidal, withdrawTidal – Wrong Arithmetic CalculationsFixed
The report gives no description here.
Criticalrefund – Attacker Can Lock Insurance Holder’s Refunds by Calling refund Before a Refund Was AllocatedFixed
The report gives no description here.
Highbuy – Insurance Buyers Trying to Increase Their Coverage Amount Will Lose Their Previous CoverageFixed
The report gives no description here.
Highclaim – Incomplete and Lenient ImplementationFixed
The report gives no description here.
MediumaddPolicy, setPolicy – Missing Input ValidationFixed
The report gives no description here.
Mediuminitialize – Committee Members Array Can Contain DuplicatesFixed
The report gives no description here.
MediumMissing Validation Checks in executeFixed
The report gives no description here.
MediumPool.buy– Users May End Up Paying More Than Intended Due to Changes in policy.weeklyPremiumFixed
The report gives no description here.
MediumSeveral Issues Related to Upgradeability of ContractsFixed
The report gives no description here.
Show 10 more
LowCode Used for Testing Purposes Should Be Removed Before DeploymentFixed
The report gives no description here.
LowCommitteeRequest, WithdrawRequest - Should Use an enum Type ✓Fixed
The report gives no description here.
LowHard-Coded Minimum Deposit AmountFixed
The report gives no description here.
LowMissing EventsFixed
The report gives no description here.
LowOutdated Solidity VersionFixed
The report gives no description here.
LowReentrancy ConcernsFixed
The report gives no description here.
LowUnnecessary and Outdated Pragma Directive ✓Fixed
The report gives no description here.
LowUnnecessary Use of SafeMath LibraryFixed
The report gives no description here.
LowUnused Import ✓Fixed
The report gives no description here.
Lowvote - Voting “No” Has No Effect ✓Fixed
The report gives no description here.
Show 1 more
Lowvote Could Call execute When committeeThreshold Is Reached ✓Fixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (5)
- contracts/common/NonReentrancy.sol
- contracts/Pool.sol
- contracts/model/PoolModel.sol
- contracts/interface/IEventAggregator.sol
- contracts/helper/EventAggregator.sol
Part of Tidal Finance’s security record
Security firm
Consensys41 projects reviewed · 59 reports · latest Oct 2024
See Consensys’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us