Avantis Labs Smart Contracts Review
Audit · firm’s term: smart contract review
Zokyo reviewed Avantis (Avantis Labs Smart Contracts Review) on 23 Dec 2023: 41 findings, 0 critical; 26 marked fixed, 15 open.
Trustblock does not review code.
Findings41
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 1 |
| Medium | 3 | 0 | 4 |
| Low | 11 | 0 | 21 |
HighLack of access control in setWithdrawThreshold functionFixed
The report gives no description here.
MediumChainlink’s latestRoundData might return stale or incorrect resultsFixed
The report gives no description here.
MediumFunction returns wrong valuesFixed
The report gives no description here.
MediumMethod getEarnings() underflowsFixed
The report gives no description here.
MediumPrincipalShareDeposited is being increased without actual transfer/minting of sharesFixed
The report gives no description here.
LowcollateralFees are initialized to values in a descending orderFixed
The report gives no description here.
LowERC20 Transfers go unvalidatedFixed
The report gives no description here.
LowFunction is returning the wrong first empty indexFixed
The report gives no description here.
LowInstant governance transferFixed
The report gives no description here.
LowInsufficient validation of max lock timeFixed
The report gives no description here.
Show 10 more
LowInverse `if-else` statements that have a negationFixed
The report gives no description here.
LowLack of PausableUpgradable initializationFixed
The report gives no description here.
LowMethods applyReferralOpen() and applyReferralClose() can be combined into a singleFixed
The report gives no description here.
LowMinLockTime should be less than maxLockTimeFixed
The report gives no description here.
LowMissing _disableInitializer() implementationFixed
The report gives no description here.
LowMissing initializing PausableUpgradeable contractFixed
The report gives no description here.
LowPair delisted but not deletedFixed
The report gives no description here.
LowReferrer codes of user can be overridden and lostFixed
The report gives no description here.
LowRepeated instructionFixed
The report gives no description here.
LowRight Bitshift by 1 when need to divide by 2Fixed
The report gives no description here.
Show 6 more
LowThe in-memory value won’t be updatedFixed
The report gives no description here.
LowThe trading contract doesn’t allow the removal of whitelisted addressesFixed
The report gives no description here.
LowTradingCallbacks.sol - In function executeLimitCloseOrderCallback(), the conditionFixed
The report gives no description here.
LowTranche Transfer can potentially lead to wasted assetsFixed
The report gives no description here.
LowUnused importFixed
The report gives no description here.
LowUse optimal `for loop`Fixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (11)
- PairInfos.sol
- VeTranche.sol
- VaultManager.sol
- Referral.sol
- TradingStorage.sol
- Trading.sol
- TradingCallbacks.sol
- Execute.sol
- PriceAggregator.sol
- PairStorage.sol
- Tranche.sol
Part of Avantis’s security record
AvantisSecurity firm
Zokyo89 projects reviewed · 131 reports · latest Feb 2025
See Zokyo’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us