For the complete documentation index, see llms.txt. This page is also available as Markdown.

๐Ÿ›ก๏ธAudits

Audit reports for the Ekubo Protocol contracts

Ekubo V3 (EVM)

The current EVM contracts are immutable and have been reviewed by multiple independent auditors and a public competitive audit. All reports live in the audits directory of the source repository.

Report
Scope

The V3 protocol, reviewed publicly by a competitive audit field

Riley Holterhus update (February 2026)

Changes since the original review

Auctions audit โ€” Riley Holterhus

The Auctions contract

Ve33 stake backing, voter-fee and emission solvency, vote consistency, and range-aware LP rewards

Automated review pass

Starknet

All Starknet contracts were most recently audited by Plainshift, concluding February 14th, 2025.

Plainshift audit report โ€” all Starknet contracts

The core contracts were audited for 15 engineer-weeks by Nethermind Security.

Nethermind Security โ€” core contracts (partially redacted)

The TWAMM extension, which powers DCA-enabled pools and DCA orders, was audited separately.

Nethermind Security โ€” TWAMM extension

The first version of the revenue buybacks contract was also audited.

Nethermind Security โ€” revenue buybacks

Governance

The Starknet L1 proxy, which lets Starknet governance control contracts on Ethereum, was audited by Cairo Security Clan. The report is on GitHub.

Legacy deployments

Audits of the deprecated EVM V2 deployment

These reports cover the EVM V2 contracts, which are deprecated and superseded by V3. They are retained for reference only.

Plainshift โ€” V2 deployment
ABDK โ€” V2 core
ABDK โ€” V2 TWAMM
ABDK โ€” V2 TWAMM invariant analysis

Last updated

Was this helpful?