Notional Finance security record
As of 30 Oct 2026, Notional Finance has 5 audit reports by 3 security firms on Trustblock; the latest is by Consensys, dated 1 Jul 2022. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits5
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Notional Finance | Security firm: Consensys | Date: | Scope: Files named in the report | No open critical findings | Open · diligence.security |
| Notional Protocol V2. | Security firm: Consensys | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · diligence.security |
| Notional Governance Contracts v2 Audit | Security firm: OpenZeppelin | Date: | Scope: Files named in the report | No open critical findings | Open · blog.openzeppelin.com |
| Notional V2 Fixes audit | Security firm: ABDK Consulting | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Notional Audit | Security firm: OpenZeppelin | Date: | Scope: Files named in the report | 3 critical findings, fixed | Open · blog.openzeppelin.com |
Findings167
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 3 |
| High | 1 | 2 | 6 |
| Medium | 16 | 0 | 11 |
| Low | 106 | 5 | 17 |
Critical[C01] All USDC can be drained from fCash markets with very little collateralNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportCritical[C02] ERC777 deposits can be credited twiceNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportCritical[C03] Borrow rates can be severely miscalculatedNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportHigh[H01] Proposal process could result in the wrong outcomeNotional Governance Contracts v2 Audit · OpenZeppelin · 5 Nov 2021Fixed
The report gives no description here.
Open the reportHighUntitled findingNotional V2 Fixes audit · ABDK Consulting · 5 Nov 2021Fixed
The report gives no description here.
Open the reportHigh[H02] Chainlink rates may need to be invertedNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportHigh[H03] _getImpliedRate does not handle errorsNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportHigh[H04] Rounding when performing div causes inconsistent balancesNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportHigh[H05] Wrong value in call can cause money to be incorrectly withdrawn from reservesNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportMedium[M02] Initial NOTE token funds could be lostNotional Governance Contracts v2 Audit · OpenZeppelin · 5 Nov 2021Fixed
The report gives no description here.
Open the reportShow 10 more
Medium[M03] Lack of event emission after sensitive actionsNotional Governance Contracts v2 Audit · OpenZeppelin · 5 Nov 2021Fixed
The report gives no description here.
Open the reportMedium[M06] Reservoir does not accept ETHNotional Governance Contracts v2 Audit · OpenZeppelin · 5 Nov 2021Fixed
The report gives no description here.
Open the reportMedium[M09] Variables are not initializedNotional Governance Contracts v2 Audit · OpenZeppelin · 5 Nov 2021Fixed
The report gives no description here.
Open the reportMediumUntitled findingNotional V2 Fixes audit · ABDK Consulting · 5 Nov 2021Fixed
The report gives no description here.
Open the reportMedium[M01] ERC777 tokens may not implement ERC20 functionsNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportMedium[M03] Math issues in SafeInt256.solNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportMedium[M04] Unchecked ERC20 return valuesNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportMedium[M05] Cash settling during low liquidity deletes cash receiver tokensNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportMedium[M06] Not all calculations use SafeMathNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportMedium[M09] Owner of Portfolios can disable marketsNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportShow 10 more
Low[L01] Users can emit Approval and VoteCast events to deceive offline servicesNotional Governance Contracts v2 Audit · OpenZeppelin · 5 Nov 2021Fixed
The report gives no description here.
Open the reportLow[L02] Lack of guardian-role transferNotional Governance Contracts v2 Audit · OpenZeppelin · 5 Nov 2021Fixed
The report gives no description here.
Open the reportLow[L04] Misleading commentsNotional Governance Contracts v2 Audit · OpenZeppelin · 5 Nov 2021Fixed
The report gives no description here.
Open the reportLow[L09] Proposals never reach the Queued stateNotional Governance Contracts v2 Audit · OpenZeppelin · 5 Nov 2021Fixed
The report gives no description here.
Open the reportLow[L10] Re-implementing ECDSA signature recoveryNotional Governance Contracts v2 Audit · OpenZeppelin · 5 Nov 2021Fixed
The report gives no description here.
Open the reportLow[L12] Unnecessary return statementsNotional Governance Contracts v2 Audit · OpenZeppelin · 5 Nov 2021Fixed
The report gives no description here.
Open the reportLowUntitled findingNotional V2 Fixes audit · ABDK Consulting · 5 Nov 2021Fixed
The report gives no description here.
Open the reportLowUntitled findingNotional V2 Fixes audit · ABDK Consulting · 5 Nov 2021Fixed
The report gives no description here.
Open the reportLowUntitled findingNotional V2 Fixes audit · ABDK Consulting · 5 Nov 2021Fixed
The report gives no description here.
Open the reportLowUntitled findingNotional V2 Fixes audit · ABDK Consulting · 5 Nov 2021Fixed
The report gives no description here.
Open the reportShow 7 more
Low[L01] Anyone can call the initializeDependencies function in CashMarket.solNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportLow[L01] INSTRUMENT_PRECISION is not fixedNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportLow[L02] _listCurrency function has no input checksNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportLow[L03] div should always be performed as late as possible in calculationsNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportLow[L04] _checkUniswapRateDifference may not use highest percentage differenceNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportLow[L05] Token fees are not accounted forNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportLow[L06] futureCashGroups parameters may not match FutureCash parametersNotional Audit · OpenZeppelin · 22 Dec 2020Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="notional-finance"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us