AaveTokenV3 (Ethereum)

0x7fc66500c84a76ad7e9c93437bfc5ac33e2ddae9 · Ethereum
Smart contract · scanned 6 h ago · Explorer

Findings

  • high Unprotected initializer
    A public initialize function has no initializer guard or caller check, so anyone may be able to call it.
  • low Raw ecrecover
    Signatures are checked with raw ecrecover, which allows malleable signatures and returns zero on bad input.
  • low Upgradeable contract
    The contract’s logic can be replaced by whoever controls upgrades.
  • info Floating pragma
    The pragma allows a range of compiler versions instead of the exact one used.
  • info Inline assembly
    The contract uses inline assembly, which bypasses the compiler’s safety checks.

Evidence, exact locations and fixes are in the deep report. How scoring works.

Scan notes

Owner/admin key check unavailable

GoPlus token data unavailable — token checks skipped

Get the full picture

Evidence, locations, fixes and an AI code review. Private link, no email.

For the team behind it: prove ownership and add active checks.

Paid in crypto via NOWPayments. Automated pre-audit, not an audit.

Facts

Contract
AaveTokenV3
Compiler
solc 0.8.20
Verified
Sourcify full match
Proxy
ERC-1967
Implementation
0x5d4aa78b08bc7c530e21bf7447988b1be7991322
Owner
None/renounced
Code size
2491

Badge

DappVet score 77

[![Vetted by DappVet](https://dappvet.com/badge/Y6qRYzE7.svg)](https://dappvet.com/c/ethereum/0x7fc66500c84a76ad7e9c93437bfc5ac33e2ddae9)

Share on X

Changed something?

Scores refresh every 6 hours. Rescan now to pick up a fix.