Spark ALM Controller v1.
Audit · firm’s term: security assessment
Certora reviewed Spark (Spark ALM Controller v1.) on 30 May 2026: 6 findings, 0 critical; 2 marked fixed, 4 acknowledged.
Findings14
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 2 |
| Low | 0 | 4 | 0 |
Marked Informational by the firm. Not counted as findings.
InformationalInconsistent Cross-Chain Event EmissionAcknowledged
The report gives no description here.
InformationalLIMIT_OTC_SWAP assumes all traded assets are worth the sameAcknowledged
The report gives no description here.
InformationalMainnetController::requestWithdrawFromWstETH() could be more gas efficient by rate-limiting wstETH amountAcknowledged
The report gives no description here.
InformationalNot resetting the withdrawal rate limit upon deposits might leave the proxy with tokens temporarily locked in the vaultAcknowledged
The report gives no description here.
InformationalOTC swap functionality on Spark ALM Controller would allow immediate loss of funds in case of relayer compromiseAcknowledged
The report gives no description here.
InformationalPartial AccessControlEnumerable implementationAcknowledged
The report gives no description here.
InformationalError message for depositERC4626 check should be clarifiedFixed
The report gives no description here.
InformationalGrammatical natspec errorsFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Spark’s security record
SparkSecurity firm
Certora29 projects reviewed · 56 reports · latest Aug 2026
See Certora’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us