Clave security review

Pashov Audit GroupCode version: not recorded (see the report)

Audit · firm’s term: security review

Pashov Audit Group reviewed Clave (Clave security review) on 2 Nov 2024: 11 findings, 0 critical; 8 marked fixed, 3 acknowledged.

No open critical findings
Open the reportOpen Clave’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings11

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium024
Low013
HighexecuteTransactionFromOutside does not increment the nonceFixed

The report gives no description here.

MediumBroken initial call functionalityFixed

The report gives no description here.

MediumremoveHook should attempt to remove the context if it exists.Fixed

The report gives no description here.

MediumTransaction fees can be underestimated due to early returnFixed

The report gives no description here.

MediumUser can bypass deployment restrictionsFixed

The report gives no description here.

LowLack of payable fallback within ClaveImplementationFixed

The report gives no description here.

LowUnexpected revert in validateTransaction due to incorrect hookData lengthFixed

The report gives no description here.

LowvalidateTransaction method reverts due to an invalid validator addressFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Clave’s security record

Clave
Audits2 audits by 1 firmLast audit Dec 2024, by Pashov Audit Group.
Critical findingsNo open critical findingsAcross 2 reports.
Open Clave’s security record

Security firm

Pashov Audit Group

30 projects reviewed · 53 reports · latest Jul 2026

See Pashov Audit Group’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us