Idle Finance
Consensys reviewed Idle Finance on 1 Jun 2021: 9 findings, 0 critical; none marked fixed.
Report hosted on diligence.security.
Trustblock does not review code.
Findings9
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 3 | 0 | 0 |
| Low | 6 | 0 | 0 |
MediumIdleCDO._deposit() allows re-entrancy from hookable tokens.Open
The report gives no description here.
MediumIdleCDO.harvest() allows price manipulation in certain circumstancesOpen
The report gives no description here.
MediumIdleCDO.virtualPrice() and _updatePrices() yield different prices in a number of casesOpen
The report gives no description here.
LowClearly communicate admin capabilitiesOpen
The report gives no description here.
LowDocumentation for formulas and price/reward calculationsOpen
The report gives no description here.
LowIdleCDO.virtualPrice() & _updatePrices() too complicated to verifyOpen
The report gives no description here.
LowMissing Sanity checksOpen
The report gives no description here.
LowPrevent initialization of implementation contractsOpen
The report gives no description here.
LowPrevent zero amount transfers/mintingOpen
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (9)
- IdleCDOTrancheRewards.sol
- IdleCDOStorage.sol
- GuardedLaunchUpgradable.sol
- interfaces/IIdleCDOTrancheRewards.sol
- interfaces/IERC20Detailed.sol
- IdleCDO.sol
- interfaces/IIdleCDOStrategy.sol
- IdleCDOTrancheRewardsStorage.sol
- IdleCDOTranche.sol
Part of Idle Finance’s security record
Idle FinanceSecurity firm
Consensys41 projects reviewed · 59 reports · latest Oct 2024
See Consensys’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us