Ipor Protocol
Ackee Blockchain Security reviewed IPOR Protocol on 12 Dec 2023: 18 findings, 1 critical; all marked fixed.
Report hosted on GitHub.
Trustblock does not review code.
Findings18
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 3 |
| Medium | 0 | 0 | 7 |
| Low | 0 | 0 | 7 |
Marked Warning or Info by the firm. Not counted as findings.
WarningInsufficient data validation in the constructorOpen
The report gives no description here.
WarningConstant block production relied onAcknowledged
The report gives no description here.
WarningUsage of solc optimizerAcknowledged
The report gives no description here.
Warning_calculateRedeemedCollateralRatio underflowFixed
The report gives no description here.
InfoDuplicated codeFixed
The report gives no description here.
WarningGithub secrets leakFixed
The report gives no description here.
WarningInfinite approvalFixed
The report gives no description here.
WarningIporProtocolRouter memory constraints violationFixed
The report gives no description here.
WarningMissing array length check in the initialize functionFixed
The report gives no description here.
WarningMissing swap direction validationFixed
The report gives no description here.
Show 10 more
InfoMixing _msgSender() and msg.sender across the codebaseFixed
The report gives no description here.
InfoRedundant logging of block.timestampFixed
The report gives no description here.
InfoRedundant requireFixed
The report gives no description here.
WarningSetting array max index in constructorFixed
The report gives no description here.
WarningSoapIndicatorRebalanceLogic underflowFixed
The report gives no description here.
InfoUnreachable codeFixed
The report gives no description here.
InfoUnused codeFixed
The report gives no description here.
InfoUse forceApprove instead of safeApproveFixed
The report gives no description here.
InfoUse type(uint256).max instead of integer literalFixed
The report gives no description here.
InfoUser can lose funds if the protocol is used incorrectlyFixed
The report gives no description here.
Show 1 more
InfoUsing magic numbersFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of IPOR Protocol’s security record
IPOR ProtocolSecurity firm
Ackee Blockchain Security39 projects reviewed · 81 reports · latest Jul 2026
See Ackee Blockchain Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us