EVAA Finance

Findings · 9

1. 1 The pause mechanism does not check for correct opcodes Medium
2. 2 New upgrade configuration is not written to storage Medium
3. 3 TON supply amount is locked when the gas check fails Medium
4. 4 Borrow amounts are incorrectly rounded Informational
5. 5 Origination fee application after collateralization check can cause undercollateralization Informational
6. 6 Supply cap bypass via return_repay_remainings_flag race condition Informational
7. 7 Insufficient fee validation leading to user contract state lock High
8. 8 Open positions can be affected by liquidation threshold changes Informational
9. 9 Incorrect rounding in present/principal value calculations for negative values Informational

Findings extracted from the published report PDF. See the full report below for details and remediation.