All Reports
Download PDF
Aegis DFF
2026-02-06
Critical0
High1
Medium4
Low3
Info5
About the Protocol
Non-depositable ERC-4626 vault managing concentrated liquidity positions across multiple Uniswap pools.
Findings (13)
H-01HighFixed
First redeemer takes all unclaimed LP fees when collectFees is not called prior
Initial redemption captures all accumulated LP fees unfairly.
M-01MediumFixed
AegisDFF cannot properly handle native ETH pools across multiple flows
Native ETH pool handling breaks across various operational flows.
M-02MediumFixed
Liquidity recalculation in withdrawAllEngineShares causes DoS
Share withdrawal triggers expensive recalculation causing gas limit errors.
M-03MediumFixed
Redeeming 0 assets doesn't transfer recently deleted tokens
Zero-asset redemption skips transfer of tokens from deleted positions.
M-04MediumFixed
dismantlePositions function is vulnerable to price manipulation
Position dismantling can be exploited via price manipulation.
Ready to Secure Your Project?
Get a free 30-minute security assessment. We will review your codebase scope and flag the top 3 risk areas.
No commitment required. Typical audits start within 1–2 weeks.