GammaSwap security review
Pashov Audit Group reviewed GammaSwap (GammaSwap security review) on 10 Jan 2025: 17 findings, 1 critical; all marked fixed.
Report hosted on GitHub.
Trustblock does not review code.
Findings17
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 2 |
| Medium | 0 | 0 | 5 |
| Low | 0 | 0 | 9 |
CriticaldisburseClaims() allows theft of unclaimed fundsFixed
The report gives no description here.
HighIncorrect swapping path in processWithdrawals()Fixed
The report gives no description here.
HighNo slippage protection when interacting with AMMFixed
The report gives no description here.
MediumDeposits will fail when pool's price reaches the min/max tickFixed
The report gives no description here.
MediumPrice manipulation risk in GammaVault collateral calculationFixed
The report gives no description here.
MediumprocessWithdrawals() incorrectly updates of totalLiquidityFixed
The report gives no description here.
MediumrebalancePosition() transaction is susceptible to frontrunningFixed
The report gives no description here.
MediumUncapped funding period deposits could lead to DoSFixed
The report gives no description here.
LowIncorrect missingAmounts checkFixed
The report gives no description here.
LowMissing transaction deadline validationFixed
The report gives no description here.
Show 7 more
LowPotential precision loss when decoding square root prices for low price valuesFixed
The report gives no description here.
LowRounding down in the shares calculation in favor of the userFixed
The report gives no description here.
LowSignature malleability due to missing ECDSA checksFixed
The report gives no description here.
LowSmall dust thresholds in rebalancing loop can cause token lossFixed
The report gives no description here.
LowStale price ratios used when calculating deposit amounts after swapsFixed
The report gives no description here.
LowUsing the wrong value when calling calcUpdatedCollateral()Fixed
The report gives no description here.
LowWithdrawn hedge profit is not reinvested into Uniswap V3 positionFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of GammaSwap’s security record
GammaSwapSecurity firm
Pashov Audit Group30 projects reviewed · 53 reports · latest Jul 2026
See Pashov Audit Group’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us