GainsNetwork security review
Audit · firm’s term: security review
Pashov Audit Group reviewed Gains Network (GainsNetwork security review) on 29 Mar 2024: 24 findings, 2 critical; 17 marked fixed, 7 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings24
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 1 | 7 |
| Medium | 0 | 4 | 4 |
| Low | 0 | 2 | 4 |
CriticalLiquidations prevented for non-18 decimal collateralsFixed
The report gives no description here.
CriticalupdateTp() and updateSl() can be abused to obtain risk-free tradeFixed
The report gives no description here.
HighCancelled MARKET_CLOSE order will affect TP/SL triggerFixed
The report gives no description here.
HighcloseTradeMarket providing wrong value when triggering getPriceFixed
The report gives no description here.
HighCollateral not approved after updating of GToken addressFixed
The report gives no description here.
HighLost roles after the proxy upgradeFixed
The report gives no description here.
HighReferralsUtils.updateReferralsOpenFeeP() implements wrong checkFixed
The report gives no description here.
HighReferralsUtils.updateStartReferrerFeeP() implements wrong checkFixed
The report gives no description here.
HighWrong validation in toggleCollateralActiveState()Fixed
The report gives no description here.
MediumgetCollaterals() does not return the last collateralFixed
The report gives no description here.
Show 7 more
MediumInaccurate calculation of v.positionSizeCollateralAfterReferralFeesFixed
The report gives no description here.
MediumIncorrect storage slot assignmentsFixed
The report gives no description here.
MediumLiquidation failure for traders on USDC blacklistFixed
The report gives no description here.
Low_correctTp and _correctSl should be called when updateTrade is calledFixed
The report gives no description here.
LowChainlink feeds could have 18 decimalsFixed
The report gives no description here.
Lows.traders will contain duplicates and affect getTraders()Fixed
The report gives no description here.
LowUnnecessary _transferCollateralToAddress() usedFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Gains Network’s security record
Gains NetworkSecurity firm
Pashov Audit Group30 projects reviewed · 53 reports · latest Jul 2026
See Pashov Audit Group’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us