Solidly Audit Report
Cyfrin reviewed Solidly (Solidly Audit Report) on 24 Jan 2024: 7 findings, 0 critical; 5 marked fixed, 2 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings7
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 3 |
| Low | 0 | 2 | 2 |
Marked Gas or Informational by the firm. Not counted as findings.
GasCache storage variables in memory when read multiple times without being changedAcknowledged
The report gives no description here.
InformationalFunctions not used internally could be marked externalAcknowledged
The report gives no description here.
GasOptimize away two memory variables in RewardsDistributor::generateLeavesAcknowledged
The report gives no description here.
GasPrefer ++x to x++Acknowledged
The report gives no description here.
InformationalPrefer explicit function for renouncing ownership and 2-step ownership transferAcknowledged
The report gives no description here.
InformationalRefactor hard-coded max pool fee into a constant as it is used in multiple placesAcknowledged
The report gives no description here.
Informationalrequire and revert statements should have descriptive reason stringsAcknowledged
The report gives no description here.
InformationalRewardsDistributor::_claimSingle should emit RewardClaimed using amountDeltaAcknowledged
The report gives no description here.
GasUse multiple requires instead of a single one with multiple statements is better for gas consumptionAcknowledged
The report gives no description here.
GasCache array length outside of loopFixed
The report gives no description here.
Show 4 more
InformationalCollateralWithdrawn and CollateralDeposited events should include relevant amountsFixed
The report gives no description here.
GasDon’t initialize variables with default valueFixed
The report gives no description here.
InformationalHard-coded pause collateral fee not appropriate for multi-chain usageFixed
The report gives no description here.
InformationalRefactor zeroRoot declared in multiple functions into a private constantFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Solidly’s security record
SolidlySecurity firm
Cyfrin28 projects reviewed · 79 reports · latest Sep 2026
See Cyfrin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us