Clave security review
Audit · firm’s term: security review
Pashov Audit Group reviewed Clave (Clave security review) on 26 Dec 2024: 8 findings, 0 critical; 6 marked fixed, 2 acknowledged.
No open critical findings
Findings8
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 4 |
| Low | 0 | 2 | 2 |
MediumsessionCounter check not enforced when removing SessionKeyValidatorFixed
The report gives no description here.
MediumSessionKeyValidator is not working on ZkSync mainnetFixed
The report gives no description here.
MediumSessionKeyValidator module cannot be removed properlyFixed
The report gives no description here.
MediumvalidateFeeLimit does not properly limit the transaction feeFixed
The report gives no description here.
LowNot restricting SessionKeyValidator as the transaction targetFixed
The report gives no description here.
LowsessionStatus and sessionState does not consider expiresAtFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Clave’s security record
ClaveAudits2 audits by 1 firmLast audit Dec 2024, by Pashov Audit Group.
Critical findingsNo open critical findingsAcross 2 reports.
Open Clave’s security recordSecurity firm
Pashov Audit Group30 projects reviewed · 53 reports · latest Jul 2026
See Pashov Audit Group’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us