Strata Tranches Audit Report
Audit · firm’s term: audit report
Cyfrin reviewed Strata (Strata Tranches Audit Report) on 8 Oct 2025: 14 findings, 1 critical; all marked fixed.
Report hosted on GitHub.
Trustblock does not review code.
Findings14
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 2 |
| Medium | 0 | 0 | 6 |
| Low | 0 | 0 | 5 |
Marked Informational or Gas by the firm. Not counted as findings.
InformationalNo helper functions for maxDeposit, maxMint, maxRedeem, maxWithdraw for sUSDeAcknowledged
The report gives no description here.
InformationalUnreachable code inside sUSDeStrategy::reduceReserveAcknowledged
The report gives no description here.
InformationalUnstakeCooldown::balance requires a different token contract than the actual token that is reporting the balance forAcknowledged
The report gives no description here.
InformationalAprPairFeed::getRoundData can return data for a different round than the specifiedFixed
The report gives no description here.
GasCache result of external calls when result can’t change between calls and is used multiple timesFixed
The report gives no description here.
InformationalCooldown contracts underreport the real balance of users because they only consider the balance of requests whose cooldown period is overFixed
The report gives no description here.
InformationalIncorrect Comment and Missing Lower Bound for minimumJrtSrtRatio in AccountingFixed
The report gives no description here.
InformationalMisleading variable name to set the asset for the TrancheFixed
The report gives no description here.
InformationalMissing Unstaked event for immediate unstake in Unstake- Cooldown::transferFixed
The report gives no description here.
InformationalMissing Validation of Fallback APR Values in AprPair- Feed::latestRoundDataFixed
The report gives no description here.
Show 4 more
GasRemove redundant checksFixed
The report gives no description here.
InformationalTypos and Bad NATSPECFixed
The report gives no description here.
InformationalUnused Import of OwnableUpgradeable in Accounting.solFixed
The report gives no description here.
InformationalUse explicit unsigned integer sizing instead of uintFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Strata’s security record
StrataSecurity firm
Cyfrin28 projects reviewed · 79 reports · latest Sep 2026
See Cyfrin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us