Term1 security review
Audit · firm’s term: security assessment
Sigma Prime reviewed Term Finance (Term1 security review) on 1 Apr 2023: 20 findings, 10 critical; 19 marked fixed, 1 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings20
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 10 |
| High | 0 | 0 | 5 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 1 | 4 |
Criticalauthenticate() tracked nonces not unique per addressFixed
The report gives no description here.
CriticalBids only transfer collateral for the first token typeFixed
The report gives no description here.
CriticalBorrowers cannot withdraw excess collateral after liquidation or defaultFixed
The report gives no description here.
CriticalCancelling an auction refunds the wrong amount for unrevealed offersFixed
The report gives no description here.
CriticalIf a transaction reverts, its authentication token can be reused by any user to authenticate any transactionFixed
The report gives no description here.
CriticalInsufficient Permissions Granted to New AuctionsFixed
The report gives no description here.
CriticalLiquidations fail with "Division by Zero" errorsFixed
The report gives no description here.
CriticalNo checks for non-zero output address when using ecrecover()Fixed
The report gives no description here.
CriticalRollover bids are set to maximum price, causing revertsFixed
The report gives no description here.
CriticalUnlocking offers does not return any fundsFixed
The report gives no description here.
Show 9 more
HighAccounting discrepancy in rollover bidsFixed
The report gives no description here.
HighAuthentication tokens could be reused from another chain or projectFixed
The report gives no description here.
HighBid price not accounted for in _isInInitialCollateralShortFall()Fixed
The report gives no description here.
HighgetCollateralBalances() returns tokens at the zero address if a user does not have a balance in a collateral tokenFixed
The report gives no description here.
HighPredictable price hashesFixed
The report gives no description here.
LowAuction settings can change after an auction startsFixed
The report gives no description here.
LowMaximum bid and offer prices are scaled upFixed
The report gives no description here.
LowNo protection against initialisation of implementation contractsFixed
The report gives no description here.
LowUse of transfer() and transferFrom()Fixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Term Finance’s security record
Term FinanceSecurity firm
Sigma Prime16 projects reviewed · 37 reports · latest Aug 2026
See Sigma Prime’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us