zkBob smart contracts Security Audit
Audit · firm’s term: security audit
ChainSecurity reviewed zkBob (zkBob smart contracts Security Audit) on 5 Jan 2023: 11 findings, 0 critical; 7 marked fixed, 4 acknowledged.
No open critical findings
Open the reportOpen zkBob’s security record
Report hosted on chainsecurity.com.
Trustblock does not review code.
Findings11
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 1 | 1 |
| Low | 0 | 3 | 5 |
MediumZkBobPool Withdrawal Sandwich AttackAcknowledged
The report gives no description here.
LowBaseERC20 OverflowAcknowledged
The report gives no description here.
LowDaily Limits Can Be AvoidedAcknowledged
The report gives no description here.
LowERC20Permit.receiveWithPermit Signature Can Be Front-RunAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (22)
- token/ERC20MintBurn.sol
- BobToken.sol
- utils/Claimable.sol
- zkbob/utils/ZkBobAccounting.sol
- utils/Ownable.sol
- yield/YieldConnector.sol
- token/ERC20Recovery.sol
- BobVault.sol
- utils/EIP712.sol
- token/ERC20Blocklist.sol
- zkbob/utils/CustomABIDecoder.sol
- yield/AAVEYieldImplementation.sol
- zkbob/manager/MutableOperatorManager.sol
- token/ERC677.sol
- zkbob/utils/Parameters.sol
- token/ERC20Permit.sol
- utils/UniswapV3Seller.sol
- zkbob/ZkBobPool.sol
- utils/Sacrifice.sol
- proxy/EIP1967Admin.sol
- zkbob/manager/SimpleOperatorManager.sol
- token/BaseERC20.sol
Part of zkBob’s security record
zkBobAudits2 audits by 2 firmsLast audit Jan 2023, by Decurity.
Critical findingsNo open critical findingsAcross 2 reports.
Open zkBob’s security recordSecurity firm
ChainSecurity81 projects reviewed · 286 reports · latest Sep 2026
See ChainSecurity’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us