Gearbox

July 2023

NFT Bounty reviewed Gearbox v2 smart contracts across liquidation, accounting, and integration paths. This case study is useful for DeFi teams assessing solvency-sensitive contract reviews, especially where liquidation behavior and external integrations can affect user funds.

Engagement snapshot

NFT Bounty reviewed Gearbox v2 smart contracts and protocol mechanics across liquidation, accounting, and integration pathways. The findings contained a number of high-severity and high-severity issues affecting correctness and adversarial resilience, plus broader /low hardening work. The report offers concrete fixes to strengthen solvency-sensitive logic and shrink liquidation/manipulation risk surfaces.

By the numbers

Total findings

22

High + high-severity findings

8

Scope we covered

  • Core v2 contracts

    Main Gearbox protocol contracts and supporting libraries in assessed scope.

  • Liquidation and accounting logic

    Risk-bearing pathways for liquidation outcomes and accounting consistency.

  • Integration behavior

    Interactions with integrated pieces and edge-case execution paths.

Looking for a security audit?

Book a scoping talk