Gearbox V3 Core

ChainSecurityFiles named in the report

Audit

ChainSecurity reviewed Gearbox (Gearbox V3 Core) on 29 Mar 2024: 17 findings, 1 critical; 15 marked fixed, 1 acknowledged, 1 open.

1 critical finding, fixed
Open the reportOpen Gearbox’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings17

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High000
Medium004
Low1110
CriticalAnyone Can Redistribute the VotesFixed

The report gives no description here.

MediumCustom Health Factor Is IgnoredFixed

The report gives no description here.

MediumNo Rate on New Quoted TokensFixed

The report gives no description here.

MediumReserve Pricefeed Can Be Main Price FeedFixed

The report gives no description here.

MediumToo Many Bots Can Block LiquidationFixed

The report gives no description here.

LowArbitrary Bot PermissionsFixed

The report gives no description here.

LowDebt Accrual on Quota DustFixed

The report gives no description here.

LowDebt Calculation Ignores Tokens With Fees on TransferFixed

The report gives no description here.

LowDivision By ZeroFixed

The report gives no description here.

LowGlobal Quoted Tokens Mask Instead of Credit Account's MaskFixed

The report gives no description here.

Show 5 more
LowInconsistent CastingFixed

The report gives no description here.

LowMint With ReferralFixed

The report gives no description here.

LowPartial Liquidations When maxEnabledTokens Are ReducedFixed

The report gives no description here.

LowQuota Increase Is Allowed for Forbidden TokensFixed

The report gives no description here.

LowUpdating Voter Contract May Lock GEARFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (54)

  • contracts/ControllerTimelockV3.sol
  • contracts/CreditManagerV3.sol
  • contracts/BalancesLogic.sol
  • contracts/ContractsRegisterTrait.sol
  • contracts/IAddressProviderV3.sol
  • contracts/QuotasLogic.sol
  • contracts/ACLNonReentrantTrait.sol
  • contracts/GaugeV3.sol
  • contracts/ICreditAccountV3.sol
  • contracts/ICreditFacadeV3.sol
  • contracts/ICreditFacadeV3Multicall.sol
  • contracts/UnsafeERC20.sol
  • contracts/WithdrawalsLogic.sol
  • contracts/LinearInterestRateModelV3.sol
  • contracts/ICreditManagerV3.sol
  • contracts/IGearStakingV3.sol
  • contracts/CreditLogic.sol
  • contracts/PoolQuotaKeeperV3.sol
  • contracts/IBotListV3.sol
  • contracts/AccountFactoryV3.sol
  • contracts/CollateralLogic.sol
  • contracts/CreditConfiguratorV3.sol
  • contracts/PriceOracleV3.sol
  • contracts/WithdrawalManagerV3.sol
  • contracts/AddressProviderV3.sol
  • contracts/IUSDT.sol
  • contracts/IAccountFactoryV3.sol
  • contracts/SanityCheckTrait.sol
  • contracts/GearStakingV3.sol
  • contracts/ICreditConfiguratorV3.sol
  • contracts/CreditAccountHelper.sol
  • contracts/IPriceOracleV3.sol
  • contracts/PriceFeedValidationTrait.sol
  • contracts/CreditFacadeV3.sol
  • contracts/USDTFees.sol
  • contracts/IVotingContractV3.sol
  • contracts/PoolV3.sol
  • contracts/BitMask.sol
  • contracts/IControllerTimelockV3.sol
  • contracts/CreditAccountV3.sol
  • contracts/BotListV3.sol
  • contracts/IPoolQuotaKeeperV3.sol
  • contracts/ITimeLock.sol
  • contracts/ACLTrait.sol
  • contracts/IWithdrawalManagerV3.sol
  • contracts/ReentrancyGuardTrait.sol
  • contracts/ILinearInterestRateModelV3.sol
  • contracts/IExceptions.sol
  • contracts/IPoolV3.sol
  • contracts/PolicyManagerV3.sol
  • contracts/PoolV3_USDT.sol
  • contracts/CreditManagerV3_USDT.sol
  • contracts/USDT_Transfer.sol
  • contracts/IGaugeV3.sol

Part of Gearbox’s security record

Gearbox
Audits13 audits by 3 firmsLast audit Oct 2025, by Decurity.
Critical findingsNo open critical findingsAcross the 13 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open Gearbox’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Sep 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us