Saddle Contracts Audit
Audit · firm’s term: audit
OpenZeppelin reviewed Saddle (Saddle Contracts Audit) on 11 Dec 2020: 12 findings, 0 critical; 9 marked fixed, 3 open.
Report hosted on blog.openzeppelin.com.
Trustblock does not review code.
Findings12
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 1 | 0 | 3 |
| Low | 2 | 0 | 6 |
Medium[M01] Pools may have duplicate tokensFixed
The report gives no description here.
Medium[M02] Initial fee rates and amplification coefficient can be set out of boundsFixed
The report gives no description here.
Medium[M04] Token fees can lead to incorrect calculationsFixed
The report gives no description here.
Low[L02] Low test coverage on some contractsFixed
The report gives no description here.
Low[L03] Improper math correction in _updateUserWithdrawFeeFixed
The report gives no description here.
Low[L04] No return values for some functionsFixed
The report gives no description here.
Low[L05] Outdated Solidity version in useFixed
The report gives no description here.
Low[L06] Token precisions not verifiedFixed
The report gives no description here.
Low[L07] Loss of accuracy caused when dividingFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (3)
- contracts/CERC20.sol
- contracts/SwapUtils.sol
- contracts/Swap.sol
Part of Saddle’s security record
SaddleSecurity firm
OpenZeppelin67 projects reviewed · 184 reports · latest Aug 2026
See OpenZeppelin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us