Voltz Protocol

QuantstampFiles named in the report

Audit

Quantstamp reviewed Voltz Protocol on 25 Mar 2022: 8 findings, 0 critical; 4 marked fixed, 4 acknowledged.

No open critical findings
Open the reportOpen Voltz Protocol’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings8

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium010
Low034
LowNo Checks If Arguments Are Non-zeroFixed

There are no checks if arguments are non-zero in the following functions: 1. `BaseRateOracle.constructor()`, 1. `AaveRateOracle.constructor()`, 1. `AaveFCM.initialize()`, 1. `Factory.constructor()`.

LowOwner Can Set Arbitrary FeesFixed

Owner can set arbitrary fees via the functions `setFeeProtocol()` and `setFee()`.

LowThe Function `grow()` Does Not Check that `next` Is < 65535Fixed

The function `grow()` does not check that `next` is < 65535. Consequently, an out of bounds error may occur.

LowUnlocked PragmaFixed

Every Solidity file specifies in the header a version number of the format `pragma solidity (^)0.4.*`. The caret (`^`) before the version number implies an unlocked pragma, meaning that the compiler will use the specified version _and above_, hence the term "unlocked".

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (67)

  • contracts/rate_oracles/AaveRateOracle.sol
  • contracts/test/TestMarginEngine.sol
  • contracts/test/MockAaveLendingPool.sol
  • contracts/core_libraries/FixedAndVariableMath.sol
  • contracts/core_libraries/Position.sol
  • contracts/utils/FixedPoint96.sol
  • contracts/test/ERC20Mock.sol
  • contracts/test/LiquidityMathTest.sol
  • contracts/test/TimeTest.sol
  • contracts/test/PositionTest.sol
  • contracts/utils/TickMath.sol
  • contracts/test/Actor.sol
  • contracts/test/ERC20.sol
  • contracts/periphery/Periphery.sol
  • contracts/utils/SqrtPriceMath.sol
  • contracts/core_libraries/Tick.sol
  • contracts/test/TestRateOracle.sol
  • contracts/utils/LiquidityMath.sol
  • contracts/interfaces/IFactory.sol
  • contracts/interfaces/IMarginEngine.sol
  • contracts/interfaces/rate_oracles/IAaveRateOracle.sol
  • contracts/utils/FullMath.sol
  • contracts/rate_oracles/BaseRateOracle.sol
  • contracts/utils/UnsafeMath.sol
  • contracts/test/E2ESetup.sol
  • contracts/interfaces/rate_oracles/IRateOracle.sol
  • contracts/interfaces/fcms/IAaveFCM.sol
  • contracts/core_libraries/SafeTransferLib.sol
  • contracts/utils/Errors.sol
  • contracts/utils/CustomErrors.sol
  • contracts/storage/VAMMStorage.sol
  • contracts/VAMM.sol
  • contracts/storage/MarginEngineStorage.sol
  • contracts/rate_oracles/OracleBuffer.sol
  • contracts/storage/FCMStorage.sol
  • contracts/test/TestAaveFCM.sol
  • contracts/test/TickBitmapTest.sol
  • contracts/aave/AaveDataTypes.sol
  • contracts/interfaces/aave/IAToken.sol
  • contracts/interfaces/IVAMM.sol
  • contracts/interfaces/IPositionStructs.sol
  • contracts/periphery/peripheral_libraries/LiquidityAmounts.sol
  • contracts/test/TestVAMM.sol
  • contracts/utils/SafeCastUni.sol
  • contracts/interfaces/aave/IAaveV2LendingPool.sol
  • contracts/test/MarginCalculatorTest.sol
  • contracts/test/TickTest.sol
  • contracts/test/FixedAndVariableMathTest.sol
  • contracts/test/SwapMathTest.sol
  • contracts/utils/FixedPoint128.sol
  • contracts/utils/Printer.sol
  • contracts/core_libraries/Time.sol
  • contracts/AaveFCM.sol
  • contracts/test/MockAToken.sol
  • contracts/utils/WadRayMath.sol
  • contracts/core_libraries/TickBitmap.sol
  • contracts/Factory.sol
  • contracts/core_libraries/SwapMath.sol
  • contracts/MarginEngine.sol
  • contracts/interfaces/fcms/IFCM.sol
  • contracts/utils/BitMath.sol
  • contracts/core_libraries/TraderWithYieldBearingAssets.sol
  • contracts/interfaces/IPeriphery.sol
  • contracts/interfaces/IERC20Minimal.sol
  • contracts/test/SqrtPriceMathTest.sol
  • contracts/test/TickMathTest.sol
  • contracts/core_libraries/MarginCalculator.sol

Part of Voltz Protocol’s security record

Voltz Protocol
Audits1 audit by 1 firmLast audit Mar 2022, by Quantstamp.
Critical findingsNo open critical findingsIn 1 report.
Open Voltz Protocol’s security record

Security firm

Quantstamp

236 projects reviewed · 332 reports · latest Oct 2026

See Quantstamp’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us