Exactly Protocol Update audit (October 2025)
ABDK Consulting reviewed Exactly Protocol (Exactly Protocol Update audit (October 2025)) on 31 Oct 2025: 37 findings, 0 critical; 8 marked fixed, 29 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings37
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 6 | 2 |
| Low | 0 | 23 | 6 |
MediumAny percentage value higher than 1e18 is silently treated as 1e18.Acknowledged
The report gives no description here.
MediumHere arrays passed as argument are modified, which is a bad practice, even though these modification cannot be seen by the caller.Acknowledged
The report gives no description here.
MediumProcedural in DebtRoller.solAcknowledged
The report gives no description here.
MediumThere is no range check for this argument.Acknowledged
The report gives no description here.
MediumThis argument is not used.Acknowledged
The report gives no description here.
MediumThis function does too many things and could exceed the block gas limit, which would make it impossible to lock certain accounts.Acknowledged
The report gives no description here.
LowDeclaring a top-level error in a file named after a contract makes it harder navigating through code.Acknowledged
The report gives no description here.
LowDeclaring a top-level structure in a file named after a contract makes it harder navigating through code.Acknowledged
The report gives no description here.
LowDeclaring top level events in a file named after a contract makes it harder navigating through code.Acknowledged
The report gives no description here.
LowDeclaring top level structures and errors in a file named after a contract makes it harder navigating through code.Acknowledged
The report gives no description here.
Show 10 more
LowDeclaring top-level errors and event in a file named after a contract makes it harder navigating through code.Acknowledged
The report gives no description here.
LowDeclaring top-level errors in a file named after a contract make is harder navigating through code.Acknowledged
The report gives no description here.
LowDeclaring top-level events and errors in a file named after a contract makes it harder navigating through code.Acknowledged
The report gives no description here.
LowIf the wToken was already set for this asset, Assets deposited there could be lost.Acknowledged
The report gives no description here.
LowProcedural in DebtRoller.solAcknowledged
The report gives no description here.
LowProcedural in DebtRoller.solAcknowledged
The report gives no description here.
LowProcedural in FlashLoanAdapter.solAcknowledged
The report gives no description here.
LowProcedural in FlashLoanAdapter.solAcknowledged
The report gives no description here.
LowProcedural in FlashLoanAdapter.solAcknowledged
The report gives no description here.
LowProcedural in VerifiedAuditor.solAcknowledged
The report gives no description here.
Show 9 more
LowProcedural in VerifiedMarket.solAcknowledged
The report gives no description here.
LowSuboptimal in DebtRoller.solAcknowledged
The report gives no description here.
LowSuboptimal in DebtRoller.solAcknowledged
The report gives no description here.
LowSuboptimal in FlashLoanAdapter.solAcknowledged
The report gives no description here.
LowSuboptimal in FlashLoanAdapter.solAcknowledged
The report gives no description here.
LowSuboptimal in Market.solAcknowledged
The report gives no description here.
LowThis function looks like a pure utility, while actually it has an unexpected side effect.Acknowledged
The report gives no description here.
LowWe didn’t review these files.Acknowledged
The report gives no description here.
LowWe didn’t review these files.Acknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Exactly Protocol’s security record
Exactly ProtocolSecurity firm
ABDK Consulting31 projects reviewed · 64 reports · latest Jan 2026
See ABDK Consulting’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us