Cian Yield Layer
Ackee Blockchain Security reviewed CIAN Protocol (Cian Yield Layer) on 16 Dec 2024: 7 findings, 0 critical; 2 marked fixed, 4 acknowledged, 1 open.
Report hosted on GitHub.
Trustblock does not review code.
Findings7
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 1 | 1 | 1 |
| Low | 0 | 3 | 1 |
Marked Info or Warning by the firm. Not counted as findings.
WarningPotential issues with retrieving borrow and supply capsOpen
The report gives no description here.
WarningProtocol owner can artificially mint Vault sharesOpen
The report gives no description here.
WarningProtocol owner can set arbitrary exchange price to poolsOpen
The report gives no description here.
InfoMissing underscore in internal function’s nameAcknowledged
The report gives no description here.
InfoModifier consistency on access controlsAcknowledged
The report gives no description here.
WarningPitfalls of the Ownable contractAcknowledged
The report gives no description here.
WarningPotential depeg of ETH- based assetsAcknowledged
The report gives no description here.
WarningStrict equality check for balancesAcknowledged
The report gives no description here.
InfoThe function can be declared as a view functionAcknowledged
The report gives no description here.
WarningUnderflow can cause DoS in confirmWithdrawalAcknowledged
The report gives no description here.
Show 9 more
WarningUsers are not able to request more than one withdrawalAcknowledged
The report gives no description here.
WarningVault is not ERC4626 compliantAcknowledged
The report gives no description here.
InfoMissing documentationFixed
The report gives no description here.
InfoTypos and incorrect NatSpec commentsFixed
The report gives no description here.
InfoUnchecked return value for OFT receiptFixed
The report gives no description here.
InfoUnused eventsFixed
The report gives no description here.
InfoUnused importsFixed
The report gives no description here.
InfoUnused using-for directivesFixed
The report gives no description here.
InfoUnused variableFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of CIAN Protocol’s security record
CIAN ProtocolSecurity firm
Ackee Blockchain Security39 projects reviewed · 81 reports · latest Jul 2026
See Ackee Blockchain Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us