Teller security record
As of 10 Nov 2026, Teller has 1 audit report on Trustblock, by Sherlock, dated 10 Dec 2024. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Audits0· Audit competitions 2
Newest first
| Report | Security firm | Date | Scope | Critical findings | Source |
|---|---|---|---|---|---|
| Teller Lender Groups Update auditAudit competition | Security firm: Sherlock | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Teller Finance auditAudit competition | Security firm: Sherlock | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
Findings40
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 2 | 13 |
| Medium | 0 | 4 | 21 |
| Low | 0 | 0 | 0 |
HighLender group members can be prevented from burning their shares foreverTeller Lender Groups Update audit · Sherlock · 10 Dec 2024Fixed
The report gives no description here.
Open the reportHighMalicious lender can prevent borrower from repayment due to try/catch block revertTeller Lender Groups Update audit · Sherlock · 10 Dec 2024Fixed
The report gives no description here.
Open the reportHighUsing original principal amount as due amount inside liquidateDefaultedLoanWithIncentive breaks contract accounting leading to lost assets/broken functionalitiesTeller Lender Groups Update audit · Sherlock · 10 Dec 2024Fixed
The report gives no description here.
Open the reportHigh_sendOrEscrowFunds will brick LCG funds causing insolvencyTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportHighAnyone can steal pool shares from lender group if no-revert-on-failure tokens are usedTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportHighburnSharesToWithdrawEarnings burns before math, causing the share value to increaseTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportHighDrained lender due to LenderCommitmentGroup_-Smart::acceptFundsForAcceptBid() _collateralAmount by STANDARD_EXPANSION_FACTOR multiplicationTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportHighIf repayLoanCallback address doesn't implement repayLoanCallback try/catch won't go into the catch and will revert the txTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportHighInterest rate in LenderCommitmentGroup_Smart may be easily manipulated by depositing, taking a loan and withdrawingTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportHighLender may not be able to close loan or get back lending token.Teller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportShow 10 more
HighLenderCommitmentGroup_Smart picks the wrong Uniswap price, allowing borrowing at a discount by swapping before withdrawingTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportHighliquidateDefaultedLoanWithIncentive can be gamed to avoid paying loans interestTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportHighliquidateDefaultedLoanWithIncentive sends the collateral to the wrong accountTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportMediumAttacker can revoke any user from a marketTeller Lender Groups Update audit · Sherlock · 10 Dec 2024Fixed
The report gives no description here.
Open the reportMediumERC20.approve Used Instead of Safe Approvals, Causing Pool Failures with Some ERC20sTeller Lender Groups Update audit · Sherlock · 10 Dec 2024Fixed
The report gives no description here.
Open the reportMediumNot updating state before making custom external call can cause borrower's to loose assets due to re-entrancyTeller Lender Groups Update audit · Sherlock · 10 Dec 2024Fixed
The report gives no description here.
Open the reportMediumRepayer can brick lending functionality of LenderCommitmentGroup_Smart by repaying excessTeller Lender Groups Update audit · Sherlock · 10 Dec 2024Fixed
The report gives no description here.
Open the reportMediumThe totalPrincipalTokensRep aid and totalInterestCollected may not be updated even when funds are already transferredTeller Lender Groups Update audit · Sherlock · 10 Dec 2024Fixed
The report gives no description here.
Open the reportMediumTokens that revert of zero value transfers can cause reverts on liquidationTeller Lender Groups Update audit · Sherlock · 10 Dec 2024Fixed
The report gives no description here.
Open the reportMediumAPRs are lower than they shouldTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportShow 10 more
MediumBorrowers can surpass liquidityThresholdPercent and borrow to near 100% of the principalTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportMediumFlashRolloverLoan_G5 will fail for LenderCommitmentGroup_Smart due to CollateralManager pulling collateral from FlashRolloverLoan_G5Teller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportMediumFlashRolloverLoan_G5 will not work for certain tokens due to not setting the approval to 0 after repaying a loanTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportMediumIncorrect selector in FlashRolloverLoan_G5::_acceptCommitment() does not match SmartCommitmentForwarder::acceptCommitmentWithRecipient()Teller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportMediumIssue #497 'Add parameter to lender accept bid for MaxMarketFee' from previous audit is still presentTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportMediumLenderCommitmentGroup pools will have incorrect exchange rate when fee-on-transfer tokens are usedTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportMediumLenderCommitmentGroup_Smart does not use mulDiv when converting between token and share amounts, possibly leading to DoS or loss of fundsTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportMediumLenderCommitmentGroup_Smart_test:: addPrincipalToCommitmentGroup/burnSharesToWithdrawEarnings() are vulnerable to slippage attacksTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportMediumLenderCommitmentGroup_Smart.sol cannot deploy pools with non-string symbol() ERC20s.Teller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportMediumMissing __Ownable_init() call in LenderCommitmentGroup_Smart::initialize()Teller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportShow 4 more
MediumPerforming a direct multiplication in _getPriceFromSqrtX96 will overflow for some uniswap poolsTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportMediumThe cycle payment due may span over approx. 2 cycles and block the borrower from payingTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportMediumUsers can bypass auction mechanism for LenderCommitmentGroup_Smart liquidation mechanism for loans that are close to end of loanTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportMediumUtilization math should include liquidityThresholdPercentTeller Finance audit · Sherlock · 29 Apr 2024Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="teller"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us