Glif security review

HexensCode version: not recorded (see the report)

Hexens reviewed GLIF (Glif security review) on 5 Aug 2024: 15 findings, 1 critical; 10 marked fixed, 5 acknowledged.

1 critical finding, fixed
Open the reportOpen GLIF’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings15

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High001
Medium023
Low035
MediumA defaulted agent may be upgraded to avoid liquidation or harvest liquidity feesAcknowledged

The report gives no description here.

MediumThe migration can be DoSedAcknowledged

The report gives no description here.

LowInfinityPoolV2 does not implement ERC20 functions needed to comply with ERC4626Acknowledged

The report gives no description here.

LowThe isValidReceiver modifier in InfinityPoolV2 and LiquidityMineLP can be bypassedAcknowledged

The report gives no description here.

LowUnused Agent.setFaulty() leads to inaccurate informationAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of GLIF’s security record

GLIF
Audits3 audits by 1 firmLast audit Dec 2025, by Hexens.
Critical findingsNo open critical findingsAcross the 3 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open GLIF’s security record

Security firm

Hexens

32 projects reviewed · 75 reports · latest Jul 2026

See Hexens’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us