SparkFi — V12 Contracts

Audit report published Jul 2024. .

Findings at a glance

Severity	Count
High	2
Medium	2
Low	4
Total	8

Summary

Safe Edges audited SparkFi V12 between 15 and 22 July 2024 using automated scanning and manual code review. Eight issues were identified: two High, two Medium and four Low. The High issues were user trading volume that was updated in memory but never written to storage, and public matching functions that can be front-run. All eight were unresolved at the time of the report.

Read the full report (PDF).

Findings

High (2)

• H-01 Missing Persistent Update in increase_user_volume — Open
• H-02 Front-Running Vulnerability in Matching Functions — Open

Medium (2)

• M-01 Missing Restriction for IOC Orders — Open
• M-02 Lack of Vector Length Restriction — Open

Low (4)

• L-01 Missing Documentation — Open
• L-02 log_order_change_info Emits No Logs — Open
• L-03 Dead Code in mul_div_rounding_up — Open
• L-04 Ineffective require in order_id — Open

More published reports

Related services

Get a fixed quote in 24 hours

Send the repository and a commit hash through the contact form, message @bugtester25 on Telegram, or book a 30-minute scoping call. 200+ protocols audited · $4B+ secured · 0 hacks post-audit. Prefer email? info@safeedges.in.