Notional Governance Contracts v2 Audit

OpenZeppelin5 Nov 2021Files named in the report

Audit · firm’s term: audit

OpenZeppelin reviewed Notional Finance (Notional Governance Contracts v2 Audit) on 5 Nov 2021: 22 findings, 0 critical; 11 marked fixed, 11 open.

No open critical findings

Open the report Open Notional Finance’s security record

Report hosted on blog.openzeppelin.com.

Trustblock does not review code.

Findings22

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	1
Medium	5	0	4
Low	6	0	6

Medium[M01] Approval process can be front-runOpen

The report gives no description here.

Medium[M04] Incomplete set of unit testsOpen

The report gives no description here.

Medium[M05] Test coverage script fails to deliver the reportOpen

The report gives no description here.

Medium[M07] Mistakenly deposited tokens in Reservoir would get stuckOpen

The report gives no description here.

Medium[M08] Untested custom SafeMath library in useOpen

The report gives no description here.

Low[L03] Implicit castingOpen

The report gives no description here.

Low[L05] Lack of input validationOpen

The report gives no description here.

Low[L06] Missing and / or incomplete docstringsOpen

The report gives no description here.

Low[L07] Not using SafeMath functionsOpen

The report gives no description here.

Low[L08] Transfer of ERC20 tokens do not use SafeERC20Open

The report gives no description here.

Show 1 more

Low[L11] Proposal execution not handling returned dataOpen

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (5)

contracts/external/governance/Reservoir.sol
interfaces/notional/NotionalProxy.sol
contracts/external/governance/NoteERC20.sol
contracts/global/Constants.sol
contracts/external/governance/GovernorAlpha.sol

Part of Notional Finance’s security record

Notional Finance

Audits5 audits by 3 firmsLast audit Jul 2022, by Consensys.

Critical findingsNo open critical findingsAcross the 5 reports, 3 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Notional Finance’s security record

Security firm

OpenZeppelin

67 projects reviewed · 184 reports · latest Aug 2026

See OpenZeppelin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.