Orderly Strategy Vault Updates

Guardian AuditsCode version: not recorded (see the report)

Audit · firm’s term: security review

Guardian Audits reviewed Orderly Network (Orderly Strategy Vault Updates) on 12 Sep 2025: 22 findings, 0 critical; 4 marked fixed, 18 acknowledged.

No open critical findings
Open the reportOpen Orderly Network’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings30

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High010
Medium032
Low0142
HighRebalance Updates Are Undone By Next SettleAcknowledged

The report gives no description here.

MediumallocateToFunds Partial DOSAcknowledged

The report gives no description here.

MediumDEX Requests Are Marked “handled” Even When They Fail, Blocking RetriesAcknowledged

The report gives no description here.

MediumSP price discrepancy between rebalance and depositAcknowledged

The report gives no description here.

LowClaim Fee Is Not Chain SpecificAcknowledged

The report gives no description here.

LowDex Requests Can Use Invalid AccountsAcknowledged

The report gives no description here.

LowDisabling strategy providers may DOS the VaultAcknowledged

The report gives no description here.

LowDuplicated Requests Dilute The ccFeeAcknowledged

The report gives no description here.

LowhandleDexRequests() Doesn't Verify TokenAcknowledged

The report gives no description here.

LowIncorrect feeRate CheckAcknowledged

The report gives no description here.

Show 8 more
LowInteger Division Truncation in Cross-Chain Fee CalculationAcknowledged

The report gives no description here.

LowLack Of Deadline For SignaturesAcknowledged

The report gives no description here.

LowMissing Source Chain Validation For Ledger-Originated Messages In _lzReceiveAcknowledged

The report gives no description here.

LowNo Only-delegatecall Guard In LedgerExtension ContractAcknowledged

The report gives no description here.

LowPrevious Rebalance Request Is Not ClearedAcknowledged

The report gives no description here.

LowRebalance can assign assets to a 0-ratio SPAcknowledged

The report gives no description here.

LowRebalanced SP can end up having shares, but no assetsAcknowledged

The report gives no description here.

LowSolana DEX ID Validation Ignores Payload TypeAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Orderly Network’s security record

Orderly Network
Audits19 audits by 5 firmsLast audit Nov 2025, by Guardian Audits.
Critical findings2 criticals acknowledged, not fixedReported in 2 reports, the latest by Guardian Audits, Oct 2023. The team acknowledged both.
Open Orderly Network’s security record

Security firm

Guardian Audits

39 projects reviewed · 196 reports · latest Oct 2026

See Guardian Audits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us