Liquity V2 - Bold Smart Contracts
ChainSecurity reviewed Liquity V2 (Liquity V2 - Bold Smart Contracts) on 14 May 2025: 18 findings, 1 critical; 16 marked fixed, 1 acknowledged, 1 open.
Report hosted on chainsecurity.com.
Trustblock does not review code.
Findings18
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 3 |
| Medium | 1 | 0 | 0 |
| Low | 0 | 1 | 12 |
CriticalRounding in Debt Shares Calculation Can Mint Unbacked TokensFixed
The report gives no description here.
HighBalancerFlashLoan Missing Access ControlFixed
The report gives no description here.
HighLeverage Zappers Do Not Return Swap ExcessFixed
The report gives no description here.
HighZappers Can Lose User FundsFixed
The report gives no description here.
LowBatches Can Be Used to Make Two Free Adjustments in a RowFixed
The report gives no description here.
LowDelegation SpecificationFixed
The report gives no description here.
LowIncorrect Code CommentsFixed
The report gives no description here.
LowInterest Delegates Are More Trusted Than NeededFixed
The report gives no description here.
LowMissing Payable ModifierFixed
The report gives no description here.
LowMissing Validation of Troves in Urgent RedemptionsFixed
The report gives no description here.
Show 6 more
LowOpening Troves Can Be BlockedFixed
The report gives no description here.
LowOut-of-gas May Lead to ShutdownFixed
The report gives no description here.
LowPrice Limit in UniV3Exchange Is Too StrictFixed
The report gives no description here.
LowShutdown Can Be Triggered TwiceFixed
The report gives no description here.
LowUser-provided transferFrom Source AddressFixed
The report gives no description here.
LowZapper Delegation Is Not Reset When a Trove Is ClosedFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (67)
- IFlashLoanProvider.sol
- UniV3Exchange.sol
- IWETHPriceFeed.sol
- IFlashLoanReceiver.sol
- LiquityBase.sol
- LiquityMath.sol
- ITroveEvents.sol
- BatchId.sol
- ILeverageZapper.sol
- CollSurplusPool.sol
- IDefaultPool.sol
- ICompositePriceFeed.sol
- IAddRemoveManagers.sol
- WETHZapper.sol
- IHintHelpers.sol
- CompositePriceFeed.sol
- RETHPriceFeed.sol
- IBoldToken.sol
- WSTETHPriceFeed.sol
- CollateralRegistry.sol
- TroveChange.sol
- ILQTYToken.sol
- IStabilityPoolEvents.sol
- ITroveNFT.sol
- BoldToken.sol
- LatestBatchData.sol
- SortedTroves.sol
- IWSTETH.sol
- IExchange.sol
- TroveNFT.sol
- IWSTETHPriceFeed.sol
- LeverageLSTZapper.sol
- IMultiTroveGetter.sol
- BorrowerOperations.sol
- BalancerFlashLoan.sol
- ICommunityIssuance.sol
- DefaultPool.sol
- IStabilityPool.sol
- ILQTYStaking.sol
- ICollSurplusPool.sol
- IBorrowerOperations.sol
- LatestTroveData.sol
- IInterestRouter.sol
- IWETH.sol
- ISortedTroves.sol
- LeverageWETHZapper.sol
- ILiquityBase.sol
- Constants.sol
- AddRemoveManagers.sol
- CurveExchange.sol
- IAddressesRegistry.sol
- GasPool.sol
- IRETHToken.sol
- StabilityPool.sol
- Ownable.sol
- GasCompZapper.sol
- ITroveManager.sol
- IBoldRewardsReceiver.sol
- TroveManager.sol
- IPriceFeed.sol
- AggregatorV3Interface.sol
- ActivePool.sol
- WETHPriceFeed.sol
- TroveId.sol
- MainnetPriceFeedBase.sol
- AddressesRegistry.sol
- ICollateralRegistry.sol
Part of Liquity V2’s security record
Liquity V2Security firm
ChainSecurity81 projects reviewed · 286 reports · latest Sep 2026
See ChainSecurity’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us