Liquity V2 security record

Arbitrum, Avalanche, Base, Ethereum, Optimism, Polygon (POS), Scroll, zkSyncliquity.orgX

As of 30 Oct 2026, Liquity V2 has 3 audit reports by 1 security firm on Trustblock; the latest is by ChainSecurity, dated 14 May 2025. Those reports list no open critical findings.

Critical findings
No open critical findings
Across the 3 reports, 3 critical findings were reported. Each is marked fixed by the firm that reported it. See the findings
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.

Audits3

Newest first

AuditSecurity firmDateScopeCritical findingsReport
Bold Smart Contracts

Audit

Security firm: ChainSecurityDate: Scope: Files named in the report1 critical finding, fixedOpen · chainsecurity.com
Liquity V2 - Bold Smart Contracts

Audit

Security firm: ChainSecurityDate: Scope: Files named in the report1 critical finding, fixedOpen · chainsecurity.com
Liquity V2 - Voting Smart Contracts

Audit

Security firm: ChainSecurityDate: Scope: Repository at commit 168760d1 critical finding, fixedOpen · chainsecurity.com

Findings74

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical003
High0012
Medium1011
Low0146
CriticalRounding in Debt Shares Calculation Can Mint Unbacked TokensBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
CriticalRounding in Debt Shares Calculation Can Mint Unbacked TokensLiquity V2 - Bold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
CriticalInitiative Votes Can Be ManipulatedLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
HighBalancerFlashLoan Missing Access ControlBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
HighBalancerFlashLoan Missing Access ControlLiquity V2 - Bold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
HighLeverage Zappers Do Not Return Swap ExcessBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
HighLeverage Zappers Do Not Return Swap ExcessLiquity V2 - Bold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
HighZappers Can Lose User FundsBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
HighZappers Can Lose User FundsLiquity V2 - Bold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
HighDeallocating From DISABLED Initiatives Makes GlobalState IncorrectLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
Show 10 more
HighInitiative Hooks Are Susceptible to Low Gas AttacksLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
HighTypo in the Code Causes Incorrect CalculationLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
HighUser's Average Timestamp Can Change Between Allocation and Deallocation of LQTYLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
HighVote Tallying Is IncorrectLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
HighVotes in BribeInitiative Are Evaluated at Current TimestampLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
MediumBribe Accounting Is Based on LQTY Amounts Instead of VotesLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
MediumBribes Are Capped at Total BalanceLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
MediumConflicting Functionalities for ForwardBribeLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
MediumEOAs Are Not Supported as InitiativesLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
MediumGovernance Does Not Enforce Warm-Up Period for InitiativesLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
Show 10 more
MediumInitiative Deregisterability Is InconsistentLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
MediumInitiative Is Deregisterable Right After ClaimingLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
MediumInitiative's Timestamp Can Be ManipulatedLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
MediumPossible Frontrun in CurveV2GaugeRewardsLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
MediumStuck AllocationsLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
MediumUnsafe Casting on Math FunctionsLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
LowBatches Can Be Used to Make Two Free Adjustments in a RowBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowBatches Can Be Used to Make Two Free Adjustments in a RowLiquity V2 - Bold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowDelegation SpecificationBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowDelegation SpecificationLiquity V2 - Bold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowIncorrect Code CommentsBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowIncorrect Code CommentsLiquity V2 - Bold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowIncorrect Scaling of PBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowInterest Delegates Are More Trusted Than NeededBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowInterest Delegates Are More Trusted Than NeededLiquity V2 - Bold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowMissing Payable ModifierBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowMissing Payable ModifierLiquity V2 - Bold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowMissing Validation of Troves in Urgent RedemptionsBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowMissing Validation of Troves in Urgent RedemptionsLiquity V2 - Bold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowOpening Troves Can Be BlockedBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowOpening Troves Can Be BlockedLiquity V2 - Bold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowOut-of-gas May Lead to ShutdownBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowOut-of-gas May Lead to ShutdownLiquity V2 - Bold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowPool Deposit Are Compared to PrecisionBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowPrice Limit in UniV3Exchange Is Too StrictBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowPrice Limit in UniV3Exchange Is Too StrictLiquity V2 - Bold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowShutdown Can Be Triggered TwiceBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowShutdown Can Be Triggered TwiceLiquity V2 - Bold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowTotal Deposit Are Compared to Wrong ConstantBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowUser-provided transferFrom Source AddressBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowUser-provided transferFrom Source AddressLiquity V2 - Bold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowZapper Delegation Is Not Reset When a Trove Is ClosedBold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
LowZapper Delegation Is Not Reset When a Trove Is ClosedLiquity V2 - Bold Smart Contracts · ChainSecurity · 14 May 2025Fixed

The report gives no description here.

Open the report
Low_calculateAverageTimestamp() Could Be off by One SecondLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
LowAllocation of Zero LQTY Triggers State Updates and Emit EventsLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
LowCurveV2GaugeRewards Does Not Check remainderLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
LowIncomplete EventsLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
LowInconsistent Behavior for Retrieval of Tokens From Staking V1Liquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
LowIncorrect SpecificationsLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
LowInitiative Snapshot Is Never DeletedLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowInitiatives Can Be Registered With No Staking in First WeeksLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
LowMeaningless Checks in BribeInitiative._claimBribe()Liquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
LowMismatch of Code With the Error MessageLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
LowPossible Simplification of onAfterAllocateLQTYLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
LowPossible Underflow in withdrawLQTYLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
LowRemaining ToDos in the CodebaseLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
LowReturn Value of Ether TransferLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
LowRounding Error on Offset CalculationLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
LowSpecial Check in onAfterAllocateLQTYLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
LowUnnecessary Approval Given to LQTYStakingLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
Show 2 more
LowUnsafe Casting in lqtyToVotesLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report
LowVotes for UNREGISTERABLE InitiativesLiquity V2 - Voting Smart Contracts · ChainSecurity · 22 Jan 2025Fixed

The report gives no description here.

Open the report

Contracts

No deployed address is recorded for these audits.

The reports name a repository or files. Open a report to see its scope.

The repositories and files the reports name

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
	<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
	<div
		data-tb-project-widget
		data-tb-project-slug="liquity-v2"
	></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us