Altitude security record
As of 2 Nov 2026, Altitude has 1 audit report on Trustblock, by OXORIO, dated 16 Jul 2024. That report lists no open critical findings.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
Findings37
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 3 | 3 |
| Medium | 0 | 7 | 8 |
| Low | 0 | 4 | 11 |
CriticalWithdrawal without considering loan interest creates bad debt in InterestTokenAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportHighAbsence of whitelist allows injection and distribution of "dirty" cryptocurrency in HarvestableManagerAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportHighExcessive debt repayment locks liquidation process in LiquidatableManagerAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportHighZero debt size sets interestIndex to 0 permanently in InterestTokenAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportMediumDEFAULT_ADMIN_ROLE is assigned to msg.sender during contracts deploymentAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportMediumIncorrect farm mode disable condition in FarmModeDecisionMakerAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportMediumincreaseAllowance and decreaseAllowance not disabled in DebtTokenAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportMediumNo _disableInitializers call in the constructor in VaultRegistryV1Altitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportMediumNo parameters validationAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportMediumNon-zero balance with zero index in InterestTokenAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportShow 10 more
MediumPotential for duplicate token creation in TokensFactoryAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportMediumReassigned amountTotal value may bypass zero check in HarvestableManagerAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportLowCode duplication in HarvestableVaultV1, LiquidatableManagerAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportLowFee is charged on withdrawal in VaultCoreV1Altitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportLowFloating pragmaAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportLowInt type initialization to zero is redundantAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportLowMagic numbersAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportLowMissed error handling in HarvestableManagerAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportLowSimplifying subtraction of commit.userHarvestUncommittedEarnings in HarvestableManagerAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportLowSuboptimal reading of the harvestStorage.harvests.length variable from storage in HarvestableManagerAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportShow 3 more
LowUnused constant MATH_UNITS in InterestTokenAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportLowUse ++i to save gasAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportLowUse += in CommitMathAltitude · OXORIO · 16 Jul 2024Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="altitude"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us