Zkbob Contracts Cdp audit

DecurityCode version: not recorded (see the report)

Decurity reviewed zkBob (Zkbob Contracts Cdp audit) on 5 Jan 2023: 13 findings, 0 critical; 9 marked fixed, 4 acknowledged.

No open critical findings
Open the reportOpen zkBob’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings13

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High002
Medium042
Low005
HighAny token can be transferred from liquidation botFixed

The report gives no description here.

HighMint/burn quota bypass in BalancedMinterFixed

The report gives no description here.

MediumMissing return value check of the ERC20 transfersFixed

The report gives no description here.

MediumUser controlled calls in collectAndIncreaseAmountFixed

The report gives no description here.

LowDifferences in Oracle implementationsFixed

The report gives no description here.

LowInfinite allowance in _checkAllowanceFixed

The report gives no description here.

LowMissing workflow invariantsFixed

The report gives no description here.

LowNo events emitted on state changesFixed

The report gives no description here.

LowWrong parameter passed to eventFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of zkBob’s security record

zkBob
Audits2 audits by 2 firmsLast audit Jan 2023, by Decurity.
Critical findingsNo open critical findingsAcross 2 reports.
Open zkBob’s security record

Security firm

Decurity

6 projects reviewed · 7 reports · latest Oct 2025

See Decurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us