RTLabs
Resonance Security reviewed RTLabs on 31 Aug 2024: 16 findings, 1 critical; 15 marked fixed, 1 open.
Trustblock does not review code.
Findings16
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 5 |
| Low | 1 | 0 | 8 |
LowFunction _convertToShares Vulnerable To Denial Of ServiceOpen
The function _convertToShares() is used by addLiquidity() to calculate the total amount of shares supply on the protocol. The calculation of the supply is proportional to the value tracked by the variable totalPooledEther. Not only does this variable increase via addLiquidity(), but also via receive() and selfdestruct(). When any of the latter situation happens, the variable supply does not increase. For specially crafted transactions, it may be possible for a malicious user to deny the smart contract from servicing legitimate users.It should be noted that the impact of this vulnerability directly depends on the amount of Ether the malicious user is willing to spend to grief other users.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of RTLabs’s security record
RTLabsSecurity firm
Resonance Security18 projects reviewed · 25 reports · latest Aug 2025
See Resonance Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us