Zkbob Contracts Cdp audit
Decurity reviewed zkBob (Zkbob Contracts Cdp audit) on 5 Jan 2023: 13 findings, 0 critical; 9 marked fixed, 4 acknowledged.
Findings13
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 2 |
| Medium | 0 | 4 | 2 |
| Low | 0 | 0 | 5 |
Marked Info by the firm. Not counted as findings.
InfoMissing isContract check for EIP1967 proxy implementationAcknowledged
The report gives no description here.
InfoNon-optimal conditional statementsAcknowledged
The report gives no description here.
InfoString error messages used instead of custom errorsAcknowledged
The report gives no description here.
InfoUnnecessary checked arithmetic in loopAcknowledged
The report gives no description here.
InfoUnused function parameterAcknowledged
The report gives no description here.
InfoVariable can be set as immutableAcknowledged
The report gives no description here.
InfoCache array length outside the loopFixed
The report gives no description here.
InfoCalldata location can be used instead of memoryFixed
The report gives no description here.
InfoInconsistent variable naming styleFixed
The report gives no description here.
InfoLocal variable shadowingFixed
The report gives no description here.
Show 9 more
InfoMissing 0x0 check on input addressesFixed
The report gives no description here.
InfoMissing check that batch_deposit_verifier is contractFixed
The report gives no description here.
InfoMissing zero transfer token amount check in ZkBobPoolFixed
The report gives no description here.
InfoNon-optimal increment/decrementFixed
The report gives no description here.
InfoOutdated OpenZeppelin libraryFixed
The report gives no description here.
InfoUnnecessary calculations in BaseERC20Fixed
The report gives no description here.
InfoUnused modifierFixed
The report gives no description here.
InfoUnused variablesFixed
The report gives no description here.
InfoVariable can be cachedFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of zkBob’s security record
zkBobSecurity firm
Decurity6 projects reviewed · 7 reports · latest Oct 2025
See Decurity’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us