Summer security record
As of 2 Nov 2026, Summer has 5 audit reports by 1 security firm on Trustblock; the latest is by ChainSecurity, dated 24 Jan 2025. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits5
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Summer Earn Protocol | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Summer Earn Protocol | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| DMA v2 II Smart Contracts | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Summer.fi Automation V2 Smart Contracts | Security firm: ChainSecurity | Date: | Scope: Files named in the report | 2 critical findings, fixed | Open · chainsecurity.com |
| Summer.fi DeFi Modular Actions v2 | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
Findings134
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 0 | 14 |
| Medium | 0 | 8 | 22 |
| Low | 3 | 16 | 69 |
CriticalArbitrary Actions and Storage ManipulationsSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportCriticalExecutor Could Draw an Unbounded Amount of CoverageSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportHighSetting Rewards Manager Stores a Different AddressSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportHighState Not Updated Before StakingSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportHighTip Not CollectedSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportHighTipped Shares Not Taken Into AccountSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportHighWrong Order Assumption in Withdrawable Arks CachingSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportHighSetting Rewards Manager Stores a Different AddressSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportHighState Not Updated Before StakingSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportHighTip Not CollectedSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportShow 10 more
HighTipped Shares Not Taken Into AccountSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportHighWrong Order Assumption in Withdrawable Arks CachingSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportHighExecuting a DPM Command RevertsSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportHighRemoving Arbitrary Triggers PossibleSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportHighUpgrades Break AutomationBotSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportHighBalancer Flashloan Can Break Proxy Access RightsSummer.fi DeFi Modular Actions v2 · ChainSecurity · 7 Aug 2023Fixed
The report gives no description here.
Open the reportMediumAuctions Can Be Locked With Wrong Payment TokenSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportMediumCompounding Tip ModelSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportMediumDefault Auction Params May Not Include Fair Token PriceSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportMediumDisembarking AaveV3Ark Can FailSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportShow 10 more
MediumGuardian Can Drain the Vesting WalletSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportMediumMax Rebalance Flows Can Be CircumventedSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportMediumPosition Token Can Be Swept on ArksSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportMediumprice_oracle Should Be Used to Read EMA PriceSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportMediumUnreached Goals Accounted After End of VestingSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportMediumWrong Direction for Buffer Adjustment ChecksSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportMediumAuctions Can Be Locked With Wrong Payment TokenSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportMediumCompounding Tip ModelSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportMediumDefault Auction Params May Not Include Fair Token PriceSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportMediumDisembarking AaveV3Ark Can FailSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportShow 10 more
MediumGuardian Can Drain the Vesting WalletSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportMediumMax Rebalance Flows Can Be CircumventedSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportMediumPosition Token Can Be Swept on ArksSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportMediumprice_oracle Should Be Used to Read EMA PriceSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportMediumUnreached Goals Accounted After End of VestingSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportMediumWrong Direction for Buffer Adjustment ChecksSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportMediumaddRecord() Does Not UnlockSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportMediumPossible Reentrancy Through ExecutionSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportLowAave Can Be Withdrawn When FrozenSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowAdmiralsQuarters Does Not Include a Callpath to getReward() on the StakingRewardsManagerSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowCalling sweep() on the BufferArk Moves All the Buffered LiquiditySummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowCode With No EffectSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowFleetCommander Shares Can Be Locked in the VaultSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowInconsistent State of rewardTokensListSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowLast Array Element ShortcutSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowMisleading Function NameSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowMisleading Variable NameSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowMissing EventsSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowMissing Getter for DetailsSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowMissing Input SanitizationSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowNon Team Vesting Cannot Have GoalsSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowPositive Slippage in _swapPtForFleetAssetSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowRemove onlyCommanderSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowRevert Instead of ReturnSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowSetting Duration of Vesting WalletSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowSimplify Redemption Post-ExpirySummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowSlippage Protection and Price Oracle in PendlePtOracleArkSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowStaking Token Can Be a Reward TokenSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowStorage Not Properly Cleaned After Ark RemovalSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowStronger Requirement for Commander RegistrationSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowTip Stream for address(0) Should Not Be AllowedSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowWrong SpecificationsSummer Earn Protocol · ChainSecurity · 24 Jan 2025Fixed
The report gives no description here.
Open the reportLowAave Can Be Withdrawn When FrozenSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowAdmiralsQuarters Does Not Include a Callpath to getReward() on the StakingRewardsManagerSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowCalling sweep() on the BufferArk Moves All the Buffered LiquiditySummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowCode With No EffectSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowFleetCommander Shares Can Be Locked in the VaultSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowInconsistent State of rewardTokensListSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowLast Array Element ShortcutSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowMisleading Function NameSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowMisleading Variable NameSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowMissing EventsSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowMissing Getter for DetailsSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowMissing Input SanitizationSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowNon Team Vesting Cannot Have GoalsSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowPositive Slippage in _swapPtForFleetAssetSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowRemove onlyCommanderSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowRevert Instead of ReturnSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowSetting Duration of Vesting WalletSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowSimplify Redemption Post-ExpirySummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowSlippage Protection and Price Oracle in PendlePtOracleArkSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowStaking Token Can Be a Reward TokenSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowStorage Not Properly Cleaned After Ark RemovalSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowStronger Requirement for Commander RegistrationSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowTip Stream for address(0) Should Not Be AllowedSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowWrong SpecificationsSummer Earn Protocol · ChainSecurity · 14 Jan 2025Fixed
The report gives no description here.
Open the reportLowArray Out of Bounds UndetectedDMA v2 II Smart Contracts · ChainSecurity · 26 Jun 2024Fixed
The report gives no description here.
Open the reportLowFlashloan Action Stores Fees OnlyDMA v2 II Smart Contracts · ChainSecurity · 26 Jun 2024Fixed
The report gives no description here.
Open the reportLowSelector Retrieval For Small DataDMA v2 II Smart Contracts · ChainSecurity · 26 Jun 2024Fixed
The report gives no description here.
Open the reportLowTransient Storage Is Not ClearedDMA v2 II Smart Contracts · ChainSecurity · 26 Jun 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowBad Trigger Ids EmittedSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportLowCommand Validation Functions Can RevertSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportLowContracts Do Not Extend the InterfacesSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportLowGroup Counter Starts at 2Summer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportLowIncorrect Argument for ApprovalGranted EventSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportLowLeft CommentsSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportLowMissing Validation in AutoTakeProfitCommandSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportLowRedundant ApprovalSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportLowRemoving Non-Callers Emits an EventSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportLowSpecification MismatchesSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportShow 7 more
LowUnequal Array LengthsSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportLowUnused ImportsSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportLowUnused Parameter, Variable and EventSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportLowWrong Event ArgumentSummer.fi Automation V2 Smart Contracts · ChainSecurity · 9 Aug 2023Fixed
The report gives no description here.
Open the reportLowInefficient txStorageSummer.fi DeFi Modular Actions v2 · ChainSecurity · 7 Aug 2023Fixed
The report gives no description here.
Open the reportLowSafeMath Is Not NeededSummer.fi DeFi Modular Actions v2 · ChainSecurity · 7 Aug 2023Fixed
The report gives no description here.
Open the reportLowSendToken Functionality Differs for Native TokensSummer.fi DeFi Modular Actions v2 · ChainSecurity · 7 Aug 2023Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="summerfi"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us