Glif security review
Hexens reviewed GLIF (Glif security review) on 5 Aug 2024: 15 findings, 1 critical; 10 marked fixed, 5 acknowledged.
Findings15
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 1 |
| Medium | 0 | 2 | 3 |
| Low | 0 | 3 | 5 |
CriticalAuthorization bypass in LiquidityMineSP allows attacker to steal unclaimed reward tokensFixed
The report gives no description here.
HighAsset Loss Due to Insufficient Liquid Assets When Using Redeem FunctionFixed
The report gives no description here.
MediumInconsistent Interest Rate for Accounts During Multi-Block Rate Update ProcessFixed
The report gives no description here.
MediumIncorrect rounding in the previewRedeem and previewMint functionsFixed
The report gives no description here.
MediumThe writeOff() function should not be allowed to trigger when the pool is paused for updating the interest rateFixed
The report gives no description here.
Low`withdrawAndHarvest` function use the same amount for both actionsFixed
The report gives no description here.
LowInfinityPoolV2.setTreasuryFeeRa te() will act retroactively if called on pauseFixed
The report gives no description here.
LowLiquidityMineLP._computeAccRew ards() takes into account tokens without an open positionFixed
The report gives no description here.
LowThe Withdraw event will be duplicated in several functionsFixed
The report gives no description here.
LowValidation is missing to ensure the agent was liquidated before `writeOff`Fixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of GLIF’s security record
GLIFSecurity firm
Hexens32 projects reviewed · 75 reports · latest Jul 2026
See Hexens’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us