Audits
Ekubo V3 (EVM)
Section titled “Ekubo V3 (EVM)”The current EVM contracts are immutable and have been reviewed by multiple independent auditors and a public competitive audit. All reports live in the audits directory of the source repository.
| Report | Scope |
|---|---|
| Code4rena competitive audit (November 2025) | The V3 protocol, reviewed publicly by a competitive audit field |
| Riley Holterhus audit | Core protocol |
| Riley Holterhus update (February 2026) | Changes since the original review |
| Auctions audit — Riley Holterhus | The Auctions contract |
| SignedExclusiveSwap review | The signed exclusive swap extension |
| Ve33 invariants and invariant verification | Ve33 stake backing, voter-fee and emission solvency, vote consistency, and range-aware LP rewards |
| AI audit scan | Automated review pass |
Starknet
Section titled “Starknet”All Starknet contracts were most recently audited by Plainshift, concluding February 14th, 2025.
Plainshift audit report — all Starknet contracts
The core contracts were audited for 15 engineer-weeks by Nethermind Security.
Nethermind Security — core contracts (partially redacted)
The TWAMM extension, which powers DCA-enabled pools and DCA orders, was audited separately.
Nethermind Security — TWAMM extension
The first version of the revenue buybacks contract was also audited.
Nethermind Security — revenue buybacks
Governance
Section titled “Governance”The Starknet L1 proxy, which lets Starknet governance control contracts on Ethereum, was audited by Cairo Security Clan. The report is on GitHub.
Legacy deployments
Section titled “Legacy deployments”Audits of the deprecated EVM V2 deployment
These reports cover the EVM V2 contracts, which are deprecated and superseded by V3. They are retained for reference only.