Exactly Protocol security record
As of 30 Oct 2026, Exactly Protocol has 8 audit reports by 3 security firms on Trustblock; the latest is by ABDK Consulting, dated 31 Oct 2025. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits8
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Exactly Protocol Update audit (October 2025) | Security firm: ABDK Consulting | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Exactly Protocol Update audit (March 2025) | Security firm: ABDK Consulting | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Exactly Protocol Update audit (April 2024) | Security firm: ABDK Consulting | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Exactly EscrowedExa Audit | Security firm: OpenZeppelin | Date: | Scope: Files named in the report | 1 critical finding, fixed | Open · blog.openzeppelin.com |
| Exactly Escrowed EXA audit | Security firm: ABDK Consulting | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Exactly Peripheral Contracts audit | Security firm: ABDK Consulting | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Exactly Protocol Phase II audit | Security firm: ABDK Consulting | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Exactly | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
Findings177
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 1 | 0 | 18 |
| Medium | 1 | 25 | 10 |
| Low | 4 | 69 | 48 |
MediumAny percentage value higher than 1e18 is silently treated as 1e18.Exactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportMediumHere arrays passed as argument are modified, which is a bad practice, even though these modification cannot be seen by the caller.Exactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportMediumProcedural in DebtRoller.solExactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportMediumThere is no range check for this argument.Exactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportMediumThis argument is not used.Exactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportMediumThis function does too many things and could exceed the block gas limit, which would make it impossible to lock certain accounts.Exactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportMediumUnderflow is possible here.Exactly Protocol Update audit (March 2025) · ABDK Consulting · 27 Mar 2025Acknowledged
The report gives no description here.
Open the reportMediumFlaw in DebtManager.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportMediumFlaw in DebtManager.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportMediumOverflow/Underflow in DebtManager.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportShow 10 more
MediumProcedural in EXA.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportMediumSuboptimal in Airdrop.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportMediumSuboptimal in Airdrop.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportMediumSuboptimal in DebtManager.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportMediumSuboptimal in DebtManager.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportMediumSuboptimal in DebtManager.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportMediumSuboptimal in DebtManager.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportMediumUnclear behavior in EXA.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportMediumFlaw in RewardsController.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportMediumOverflow/Underflow in PriceFeedDouble.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportShow 10 more
MediumOverflow/Underflow in RewardsController.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportMediumOverflow/Underflow in RewardsController.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportMediumOverflow/Underflow in RewardsController.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportMediumOverflow/Underflow in RewardsController.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportMediumProcedural in RewardsController.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportLowDeclaring a top-level error in a file named after a contract makes it harder navigating through code.Exactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowDeclaring a top-level structure in a file named after a contract makes it harder navigating through code.Exactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowDeclaring top level events in a file named after a contract makes it harder navigating through code.Exactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowDeclaring top level structures and errors in a file named after a contract makes it harder navigating through code.Exactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowDeclaring top-level errors and event in a file named after a contract makes it harder navigating through code.Exactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowDeclaring top-level errors in a file named after a contract make is harder navigating through code.Exactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowDeclaring top-level events and errors in a file named after a contract makes it harder navigating through code.Exactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowIf the wToken was already set for this asset, Assets deposited there could be lost.Exactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowProcedural in DebtRoller.solExactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowProcedural in DebtRoller.solExactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowProcedural in FlashLoanAdapter.solExactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowProcedural in FlashLoanAdapter.solExactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowProcedural in FlashLoanAdapter.solExactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowProcedural in VerifiedAuditor.solExactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowProcedural in VerifiedMarket.solExactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowSuboptimal in DebtRoller.solExactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowSuboptimal in DebtRoller.solExactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowSuboptimal in FlashLoanAdapter.solExactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowSuboptimal in FlashLoanAdapter.solExactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowSuboptimal in Market.solExactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowThis function looks like a pure utility, while actually it has an unexpected side effect.Exactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowWe didn’t review these files.Exactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowWe didn’t review these files.Exactly Protocol Update audit (October 2025) · ABDK Consulting · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportLowProcedural in Market.solExactly Protocol Update audit (March 2025) · ABDK Consulting · 27 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowProcedural in RewardsController.solExactly Protocol Update audit (March 2025) · ABDK Consulting · 27 Mar 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowSuboptimal in Market.solExactly Protocol Update audit (March 2025) · ABDK Consulting · 27 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowSuboptimal in Market.solExactly Protocol Update audit (March 2025) · ABDK Consulting · 27 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowThe storage address of “dist.availableRewards” is calculated on every loop iteration.Exactly Protocol Update audit (March 2025) · ABDK Consulting · 27 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowBad datatype in InterestRateModel.solExactly Protocol Update audit (April 2024) · ABDK Consulting · 30 Apr 2024Acknowledged
The report gives no description here.
Open the reportLowBad datatype in InterestRateModel.solExactly Protocol Update audit (April 2024) · ABDK Consulting · 30 Apr 2024Acknowledged
The report gives no description here.
Open the reportLowBad datatype in InterestRateModel.solExactly Protocol Update audit (April 2024) · ABDK Consulting · 30 Apr 2024Acknowledged
The report gives no description here.
Open the reportLowBad datatype in Market.solExactly Protocol Update audit (April 2024) · ABDK Consulting · 30 Apr 2024Acknowledged
The report gives no description here.
Open the reportLowBad datatype in RewardsController.solExactly Protocol Update audit (April 2024) · ABDK Consulting · 30 Apr 2024Acknowledged
The report gives no description here.
Open the reportLowSuboptimal in InterestRateModel.solExactly Protocol Update audit (April 2024) · ABDK Consulting · 30 Apr 2024Acknowledged
The report gives no description here.
Open the reportLowSuboptimal in InterestRateModel.solExactly Protocol Update audit (April 2024) · ABDK Consulting · 30 Apr 2024Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowLack of Input ValidationExactly EscrowedExa Audit · OpenZeppelin · 27 Oct 2023Acknowledged
The report gives no description here.
Open the reportLowBad datatype in Airdrop.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportLowBad datatype in EXA.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportLowBad naming in EscrowedEXA.solExactly Escrowed EXA audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in Airdrop.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in Airdrop.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in Airdrop.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in Airdrop.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in DebtManager.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in DebtManager.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowProcedural in DebtManager.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in DebtManager.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in EscrowedEXA.solExactly Escrowed EXA audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in EscrowedEXA.solExactly Escrowed EXA audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in EscrowedEXA.solExactly Escrowed EXA audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in EscrowedEXA.solExactly Escrowed EXA audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in Swapper.solExactly Escrowed EXA audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in Swapper.solExactly Escrowed EXA audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in Swapper.solExactly Escrowed EXA audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in Swapper.solExactly Escrowed EXA audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowReadability in DebtManager.solExactly Peripheral Contracts audit · ABDK Consulting · 26 Sep 2023Acknowledged
The report gives no description here.
Open the reportLowBad datatype in Market.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in Market.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in Market.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in PriceFeedDouble.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in RewardsController.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in RewardsController.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportLowProcedural in RewardsController.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportLowSuboptimal in RewardsController.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportLowSuboptimal in RewardsController.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportShow 4 more
LowSuboptimal in RewardsController.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportLowSuboptimal in RewardsController.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportLowSuboptimal in RewardsController.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportLowSuboptimal in RewardsController.solExactly Protocol Phase II audit · ABDK Consulting · 17 May 2023Acknowledged
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="exactly"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us