IonProtocol security review
Audit · firm’s term: security review
Pashov Audit Group reviewed Ion Protocol (IonProtocol security review) on 9 May 2024: 18 findings, 1 critical; 12 marked fixed, 6 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings18
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 1 |
| Medium | 0 | 3 | 4 |
| Low | 0 | 3 | 6 |
CriticalUsing underlying as the input amount instead of normalized balancesFixed
The report gives no description here.
HighTriggering the vault's _accrueFee while the IonPool is pausedFixed
The report gives no description here.
Medium_depositable and _withdrawable return if pausedFixed
The report gives no description here.
MediumAllocator can bypass supply capFixed
The report gives no description here.
MediumInflation attack in VaultFixed
The report gives no description here.
MediumNew pool can be temporarily blockedFixed
The report gives no description here.
LowChanging feePercentage will affect past interestFixed
The report gives no description here.
LowEvent in RewardToken uses wrong amountFixed
The report gives no description here.
LowmaxWithdraw and maxRedeem could return the wrong valueFixed
The report gives no description here.
LowNo max limit for supported market listFixed
The report gives no description here.
Show 2 more
LowThe newly minted amount not considered for the treasuryFixed
The report gives no description here.
LowtimestampIncrease is incorrectly set to 0Fixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Ion Protocol’s security record
Ion ProtocolSecurity firm
Pashov Audit Group30 projects reviewed · 53 reports · latest Jul 2026
See Pashov Audit Group’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us