Vyper Compiler 0.4.2 Pull Requests
ChainSecurity reviewed Vyper (Vyper Compiler 0.4.2 Pull Requests) on 24 Apr 2025: 27 findings, 0 critical; none marked fixed.
Report hosted on chainsecurity.com.
Trustblock does not review code.
Findings27
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 3 | 0 | 0 |
| Low | 24 | 0 | 0 |
MediumIncorrect Order of Evaluation of Arguments of Builtin FunctionOpen
The report gives no description here.
MediumMake_setter Is Incorrect for Complex Types When the RHS References the LHS With a Function CallOpen
The report gives no description here.
MediumMetadata Journal Can Rollback IncorrectlyOpen
The report gives no description here.
LowAssertion Could Be More Precise in parse_BinopOpen
The report gives no description here.
LowAssertions Are Not ConstantOpen
The report gives no description here.
LowCalls to State-Modifying Functions in Range Expressions Are Not Caught by the Type-CheckerOpen
The report gives no description here.
LowDefault Arguments Are Treated as Keyword ArgumentsOpen
The report gives no description here.
LowEpsilon Is Not DocumentedOpen
The report gives no description here.
LowIfExp Cannot Be Used in a SubscriptOpen
The report gives no description here.
LowIfExp Fails at Codegen When Used With Self or Environment VariablesOpen
The report gives no description here.
Show 10 more
LowIfExp Not Annotated When Used as Iterable for a LoopOpen
The report gives no description here.
LowImplements Statement Does Not Enforce the Same Indexation of EventsOpen
The report gives no description here.
LowImported Contracts Are Not Fully Semantically ValidatedOpen
The report gives no description here.
Lowin and Not in Cannot Be Used With DynArray of EnumsOpen
The report gives no description here.
LowIncorrect Typing of Builtins Whose Return Type Depends on Some of Its Argument's TypesOpen
The report gives no description here.
LowIncorrect Typing of Loop Iterable When It Is a List LiteralOpen
The report gives no description here.
LowIncorrect Typing of Raw_Call When Max_Outsize=0 in KwargsOpen
The report gives no description here.
LowMultiple Evaluations of DST Lead to Non-Unique Symbol Errors When Copying Bytes Arrays or DynArraysOpen
The report gives no description here.
LowNesting a Pop in Append Results in Incorrect BehaviorOpen
The report gives no description here.
LowNo Sanity Check on Storage Layout FilesOpen
The report gives no description here.
Show 7 more
LowOverriding Storage Layout Fails With ImmutablesOpen
The report gives no description here.
LowPR 3134 Has Been RevertedOpen
The report gives no description here.
LowRedundant and Incomplete Function Selector Collision ChecksOpen
The report gives no description here.
LowReferences to Public Constant and Immutables With Self Missed by the TypecheckerOpen
The report gives no description here.
LowSemantic Analysis of the Imported Contract Is Done With the Current Contract's NamespaceOpen
The report gives no description here.
LowStateAccessViolation When "Self" Is Used as a Struct Field NameOpen
The report gives no description here.
LowTypecheckFailure When Using Address and Self Members as Struct Field NameOpen
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Vyper’s security record
VyperSecurity firm
ChainSecurity81 projects reviewed · 286 reports · latest Sep 2026
See ChainSecurity’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us