Vfat Sickle

Ackee Blockchain SecurityCode version: not recorded (see the report)

Ackee Blockchain Security reviewed vfat (Vfat Sickle) on 9 May 2025: 3 findings, 0 critical; 1 marked fixed, 1 acknowledged, 1 open.

No open critical findings
Open the reportOpen vfat’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings3

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High100
Medium010
Low001

Marked Warning or Info by the firm. Not counted as findings.

WarningIncomplete data validation for NFT positionsOpen

The report gives no description here.

InfoMissing duplicate registry validationOpen

The report gives no description here.

WarningNo data validation on registry adding and updatesOpen

The report gives no description here.

WarningAmbiguous handling of the native value in the SwapLib contractAcknowledged

The report gives no description here.

WarningDuplicate Sickle retrievalAcknowledged

The report gives no description here.

WarningDuplicate tokens in feeTokens array can lead to inconsistent fee calculationAcknowledged

The report gives no description here.

WarningInconsistent handling of ETH and WETH across the FeesLib contractAcknowledged

The report gives no description here.

WarningMissing zero address validationAcknowledged

The report gives no description here.

WarningOne-step ownership transferAcknowledged

The report gives no description here.

InfoDuplicate codeFixed

The report gives no description here.

Show 10 more
InfoErrors in documentationFixed

The report gives no description here.

InfoInconsistent function naming conventionFixed

The report gives no description here.

WarningIncorrect price calculation in PositionSettingsRegistryFixed

The report gives no description here.

WarningIncorrect usage of InitializableFixed

The report gives no description here.

WarningInsufficient data validation in the PositionSettingsRegistry contractFixed

The report gives no description here.

InfoMapping isCustomRegistry is redundantFixed

The report gives no description here.

InfoMisleading error nameFixed

The report gives no description here.

WarningMisleading inheritanceFixed

The report gives no description here.

WarningNo input array length validationFixed

The report gives no description here.

WarningPotential underflow or overflow in tick range calculationFixed

The report gives no description here.

Show 8 more
InfoRedundant functionFixed

The report gives no description here.

InfoRedundant storage variableFixed

The report gives no description here.

InfoTypographical error in function commentFixed

The report gives no description here.

InfoUnconsolidated storage variable definitionsFixed

The report gives no description here.

InfoUnused errorsFixed

The report gives no description here.

InfoUsage of magic constantsFixed

The report gives no description here.

WarningVariable naming conventionFixed

The report gives no description here.

WarningVariable shadowingFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of vfat’s security record

vfat
Audits2 audits by 1 firmLast audit Jun 2025, by Ackee Blockchain Security.
Critical findingsNo open critical findingsAcross 2 reports.
Open vfat’s security record

Security firm

Ackee Blockchain Security

39 projects reviewed · 81 reports · latest Jul 2026

See Ackee Blockchain Security’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us