Gearbox security record
As of 23 Oct 2026, Gearbox has 13 audit reports by 3 security firms on Trustblock; the latest is by Decurity, dated 21 Oct 2025. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits13
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Gearbox Balancer V3 Integrations audit | Security firm: Decurity | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Gearbox Permissionless Smart Contracts | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Gearbox V3 Integrations | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Gearbox Migration Bot | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Gearbox Core & Oracles V3. | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Gearbox V3 Core | Security firm: ChainSecurity | Date: | Scope: Files named in the report | 1 critical finding, fixed | Open · chainsecurity.com |
| Gearbox Oracles audit | Security firm: ABDK Consulting | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| V3 Oracles | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Gearbox V2. | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| V3 Governance | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Gearbox Auction | Security firm: ChainSecurity | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · chainsecurity.com |
| Gearbox V2 | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Gearbox system | Security firm: ChainSecurity | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · chainsecurity.com |
Findings170
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 15 | 17 |
| Medium | 0 | 2 | 29 |
| Low | 3 | 29 | 74 |
CriticalAnyone Can Redistribute the VotesGearbox V3 Core · ChainSecurity · 29 Mar 2024Fixed
The report gives no description here.
Open the reportHighCannot Forbid an Adapter With Normal ConfigurationGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportHighFactory Migration Will FailGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportHighLegacy CreditManager Cannot Be Fully ConfiguredGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportHighOverwritten Version in AddressProviderGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportHighReverting Proposals Lock Cross-Chain GovernanceGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportHighTimelock Transactions Can Be Executed Before the ETAGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportHighUpdating a Rate Keeper Will Freeze the EpochGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportHighBack-running Redemption ApprovalsGearbox V3 Integrations · ChainSecurity · 25 Jul 2025Fixed
The report gives no description here.
Open the reportHighFront-running the RedeemGearbox V3 Integrations · ChainSecurity · 25 Jul 2025Fixed
The report gives no description here.
Open the reportShow 10 more
HighProcedural in LPPriceFeed.solGearbox Oracles audit · ABDK Consulting · 13 Dec 2023Fixed
The report gives no description here.
Open the reportHighSuboptimal in CurveCryptoLPPriceFeed.solGearbox Oracles audit · ABDK Consulting · 13 Dec 2023Fixed
The report gives no description here.
Open the reportHighSuboptimal in CurveCryptoLPPriceFeed.solGearbox Oracles audit · ABDK Consulting · 13 Dec 2023Fixed
The report gives no description here.
Open the reportHighUnclear behavior in RedstonePriceFeed.solGearbox Oracles audit · ABDK Consulting · 13 Dec 2023Fixed
The report gives no description here.
Open the reportHighWrong WaToken DistributionGearbox V2. · ChainSecurity · 15 Sep 2023Fixed
The report gives no description here.
Open the reportHighIncorrect Arguments in checkCollateralChangeGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportHighNon-Accessible Credit AccountsGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportHighRetain Ownership of Credit AccountGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportMediumBatching disableRecoveryMode Can Be ProblematicGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportMediumDynamic Types Must Be Hashed for EIP712Gearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportShow 10 more
MediumFree Choice of maxEnabledTokens Can Be DangerousGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportMediumLegacy PriceOracle Cannot Be UpdatedGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportMediumMissing Sanity Checks on minorVersionGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportMediumRecovery Mode Message ReplayGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportMediumShutting Down a Market ConfiguratorGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportMediumThreshold Not Enforced When Removing SignerGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportMediumExcessive Gas Burnt for Static CallsGearbox Core & Oracles V3. · ChainSecurity · 31 Mar 2025Fixed
The report gives no description here.
Open the reportMediumCustom Health Factor Is IgnoredGearbox V3 Core · ChainSecurity · 29 Mar 2024Fixed
The report gives no description here.
Open the reportMediumNo Rate on New Quoted TokensGearbox V3 Core · ChainSecurity · 29 Mar 2024Fixed
The report gives no description here.
Open the reportMediumReserve Pricefeed Can Be Main Price FeedGearbox V3 Core · ChainSecurity · 29 Mar 2024Fixed
The report gives no description here.
Open the reportShow 10 more
MediumToo Many Bots Can Block LiquidationGearbox V3 Core · ChainSecurity · 29 Mar 2024Fixed
The report gives no description here.
Open the reportMediumFlaw in RedstonePriceFeed.solGearbox Oracles audit · ABDK Consulting · 13 Dec 2023Fixed
The report gives no description here.
Open the reportMediumSuboptimal in BPTStablePriceFeed.solGearbox Oracles audit · ABDK Consulting · 13 Dec 2023Fixed
The report gives no description here.
Open the reportMediumWeights in Balancer Managed Pools Can ChangeV3 Oracles · ChainSecurity · 11 Dec 2023Fixed
The report gives no description here.
Open the reportMediumCompound Adapter's redeemUnderlying() Not ExecutedGearbox V2. · ChainSecurity · 15 Sep 2023Fixed
The report gives no description here.
Open the reportMediumInheriting ACLTrait Includes Pause/UnpauseGearbox V2. · ChainSecurity · 15 Sep 2023Fixed
The report gives no description here.
Open the reportMediumMulticall Actions During PausesGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportMediumPricefeed of Oracle May Be UpdatedGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportMediumUnable to Handle Missing Return ValueGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportMediumContracts Implement Proxy PatternGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportShow 10 more
MediumDoS of LeverageActionsGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportMediumIncorrect params.amountOutMinimumGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportMediummaxAmount Can Be CircumventedGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportMediumtakeOut May Break the Account ListGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportMediumTrust Model of External AdaptersGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportMediumUsers Can Avoid Paying Fees On ClosureGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportMediumWrong Approval To PoolGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportLowA Transaction Can Be Canceled After ExecutionGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportLowAllowance Timestamp Can Be ResetGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportLowEnough Admins CheckGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowForbidden initCodeGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportLowPending OwnersGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportLowWrong SpecificationsGearbox Permissionless Smart Contracts · ChainSecurity · 1 Aug 2025Fixed
The report gives no description here.
Open the reportLowNumber of Underlying Tokens in MetapoolsGearbox V3 Integrations · ChainSecurity · 25 Jul 2025Fixed
The report gives no description here.
Open the reportLowUsage of ptOverrideGearbox Migration Bot · ChainSecurity · 25 Jul 2025Fixed
The report gives no description here.
Open the reportLowWrappedAToken Does Not Implement Its InterfaceGearbox V3 Integrations · ChainSecurity · 25 Jul 2025Fixed
The report gives no description here.
Open the reportLowMissing Input SanitizationGearbox Core & Oracles V3. · ChainSecurity · 31 Mar 2025Fixed
The report gives no description here.
Open the reportLowPQK Reads the Wrong Gauge on Gauge UpdateGearbox Core & Oracles V3. · ChainSecurity · 31 Mar 2025Fixed
The report gives no description here.
Open the reportLowWrong SpecificationsGearbox Core & Oracles V3. · ChainSecurity · 31 Mar 2025Fixed
The report gives no description here.
Open the reportLowArbitrary Bot PermissionsGearbox V3 Core · ChainSecurity · 29 Mar 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowDebt Accrual on Quota DustGearbox V3 Core · ChainSecurity · 29 Mar 2024Fixed
The report gives no description here.
Open the reportLowDebt Calculation Ignores Tokens With Fees on TransferGearbox V3 Core · ChainSecurity · 29 Mar 2024Fixed
The report gives no description here.
Open the reportLowDivision By ZeroGearbox V3 Core · ChainSecurity · 29 Mar 2024Fixed
The report gives no description here.
Open the reportLowGlobal Quoted Tokens Mask Instead of Credit Account's MaskGearbox V3 Core · ChainSecurity · 29 Mar 2024Fixed
The report gives no description here.
Open the reportLowInconsistent CastingGearbox V3 Core · ChainSecurity · 29 Mar 2024Fixed
The report gives no description here.
Open the reportLowMint With ReferralGearbox V3 Core · ChainSecurity · 29 Mar 2024Fixed
The report gives no description here.
Open the reportLowPartial Liquidations When maxEnabledTokens Are ReducedGearbox V3 Core · ChainSecurity · 29 Mar 2024Fixed
The report gives no description here.
Open the reportLowQuota Increase Is Allowed for Forbidden TokensGearbox V3 Core · ChainSecurity · 29 Mar 2024Fixed
The report gives no description here.
Open the reportLowUpdating Voter Contract May Lock GEARGearbox V3 Core · ChainSecurity · 29 Mar 2024Fixed
The report gives no description here.
Open the reportLowBad datatype in LPPriceFeed.solGearbox Oracles audit · ABDK Consulting · 13 Dec 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowBad datatype in LPPriceFeed.solGearbox Oracles audit · ABDK Consulting · 13 Dec 2023Fixed
The report gives no description here.
Open the reportLowBad datatype in RedstonePriceFeed.solGearbox Oracles audit · ABDK Consulting · 13 Dec 2023Fixed
The report gives no description here.
Open the reportLowDocumentation in RedstonePriceFeed.solGearbox Oracles audit · ABDK Consulting · 13 Dec 2023Fixed
The report gives no description here.
Open the reportLowDocumentation in RedstonePriceFeed.solGearbox Oracles audit · ABDK Consulting · 13 Dec 2023Fixed
The report gives no description here.
Open the reportLowProcedural in RedstonePriceFeed.solGearbox Oracles audit · ABDK Consulting · 13 Dec 2023Fixed
The report gives no description here.
Open the reportLowReadability in AbstractPriceFeed.solGearbox Oracles audit · ABDK Consulting · 13 Dec 2023Fixed
The report gives no description here.
Open the reportLowMissing Duplicate Signer CheckV3 Oracles · ChainSecurity · 11 Dec 2023Fixed
The report gives no description here.
Open the reportLowBlacklistHelper Claimable Balance Is 1 Wei offGearbox V2. · ChainSecurity · 15 Sep 2023Fixed
The report gives no description here.
Open the reportLowInconsistent Test for Reward Token WrapperGearbox V2. · ChainSecurity · 15 Sep 2023Fixed
The report gives no description here.
Open the reportLowMissing EventGearbox V2. · ChainSecurity · 15 Sep 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowQuery of Curve's Tricrypto Pool Virtual PriceGearbox V2. · ChainSecurity · 15 Sep 2023Fixed
The report gives no description here.
Open the reportLowUniswapConnectorChecker Missing Sanity CheckGearbox V2. · ChainSecurity · 15 Sep 2023Fixed
The report gives no description here.
Open the reportLowMissing Input SanitizationV3 Governance · ChainSecurity · 12 Aug 2023Fixed
The report gives no description here.
Open the reportLowAdvance to Wrong StageGearbox Auction · ChainSecurity · 12 Dec 2022Fixed
The report gives no description here.
Open the reportLowETH TransferGearbox Auction · ChainSecurity · 12 Dec 2022Fixed
The report gives no description here.
Open the reportLowGas OptimizationsGearbox Auction · ChainSecurity · 12 Dec 2022Fixed
The report gives no description here.
Open the reportLowShearing Percent Getter Wrong Before Fair Trading StageGearbox Auction · ChainSecurity · 12 Dec 2022Fixed
The report gives no description here.
Open the reportLowAdapters Ignore User InputGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowAdd Token Without Liquidation ThresholdGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowChecking for Valid Token Indices for Curve Pools Is Too LooseGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportShow 10 more
LowCredit Accounts Give Very High Approval to ContractGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowCreditAccount Calls approve() on Unsupported TokenGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowCumulativeDrop Calculation RoundingGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowCurve RegistryGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowCurveV1 Adapters: TokenOut Might Not Be Enabled at CreditAccountGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowDuplicate Error Code UsedGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowFree Flashloan upon Open/CloseGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowIncorrect Comment After RefactoringGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowIncorrect DescriptionsGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowOutdated Function DescriptionGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportShow 10 more
LowPriceOracle: Unused TimestampGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowRead-only ReentrancyGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowRedundant Event EmissionGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowRedundant InitializationGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowReentrancy Into CreditFacadeGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowSanity Check of New PricefeedGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowtwvUSD Contains Value in UnderlyingGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowUnused allowedContractsSetGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowYearnV2Adapter: Different Behavior of FunctionsGearbox V2 · ChainSecurity · 8 Nov 2022Fixed
The report gives no description here.
Open the reportLowallowToken Can Be BlockedGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportShow 10 more
LowcancelAllowance Cannot Be CalledGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportLowconnectCreditManager Access ControlGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportLowDiscrepancy Between openShortUniV2 and openShortUniV3Gearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportLowHead Cannot Be Taken OutGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportLowPointers Not Updated On takeOutGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportLowrayMul and rayDiv Are Used With No Ray ValuesGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportLowRedundant MultiplicationGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportLowRounding ErrorsGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportLowStorage OptimizationsGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportLowTaking Out the First-Ever Created AccountGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportShow 1 more
LowUse of transferGearbox system · ChainSecurity · 24 Dec 2021Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="gearbox-protocol"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us