Torque

QuillAudits28 Aug 20241 address on Arbitrum

Audit · firm’s term: audit report

QuillAudits reviewed Torque on 28 Aug 2024: 6 findings, 0 critical; 2 marked fixed, 4 open.

No open critical findings

Open the report Open Torque’s security record

Report hosted on quillaudits.com.

Trustblock does not review code.

Findings6

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	0	1
Medium	0	0
Low	4	1

HighInadequate Handling of Excess Funds in Repay FunctionsFixed

The depositUSDC and depositUSDCe functions currently transfer the full amount of USDC or USDCe specified by the user to the contract, and then call the repay function on the lending protocol. However, if the amount to be repaid is less than the amount sent by the user, the contract does not return the excess funds to the user. This discrepancy can lead to a loss of tokens for the user, as the contract should handle and refund any surplus amount that was not used for repayment.

LowEmergency Withdraw Function May Fail for Certain TokensFixed

The withdraw function is designed as an emergency mechanism to retrieve funds from the contract. However, it relies on the return value of the transfer function to verify successful transfers. Some tokens, especially non-standard or poorly implemented ones, may not return a value on transfer operations, causing the function to fail and potentially lock the tokens in the contract permanently.