Securitize Public Stock On/Off Ramp Audit Report
Cyfrin reviewed Securitize (Securitize Public Stock On/Off Ramp Audit Report) on 24 Dec 2025: 18 findings, 0 critical; 15 marked fixed, 3 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings18
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 4 |
| Low | 0 | 3 | 11 |
MediumIncorrect use of investorExists modifier in PublicStockOnRamp::swapFixed
The report gives no description here.
MediumSecuritizeAmmNavProvider missing whenNotPaused modifier on important state-changing functionsFixed
The report gives no description here.
MediumSecuritizeOnRamp::swap and SecuritizeOffRamp::redeem pass operator as investor address resulting in denial of serviceFixed
The report gives no description here.
MediumZero curvePriceWad from rounding causes incorrect pricing or denial of serviceFixed
The report gives no description here.
LowIncorrect rounding direction in SecuritizeAmm- NavProvider::executeBuyBase when scaling down execPriceFixed
The report gives no description here.
LowLack of Price Feed Update Function in RedStoneNavProviderFixed
The report gives no description here.
LowMissing zero output validation in SecuritizeAmmNavProvider quote and buy functionsFixed
The report gives no description here.
LowRedStoneNavProvider::rate can return zero for non-zero oracle input due to rounding in Helper::normalizeRateFixed
The report gives no description here.
LowRedStoneNavProvider::rate will return massively inflated value if underlying oracle returns a negative value and lacks common oracle validationsFixed
The report gives no description here.
LowSecuritizeAmmNavProvider quote functions don’t reflect execution behavior due to missing baseline reset logicFixed
The report gives no description here.
Show 5 more
LowSecuritizeAmmNavProvider trades when pool price and anchor price differ can leak valueFixed
The report gives no description here.
LowSecuritizeAmmNavProvider violates core AMM invariant that k should never decreaseFixed
The report gives no description here.
LowSecuritizeAmmNavProvider virtual reserve rounding erosion can lead to denial of serviceFixed
The report gives no description here.
LowSignatures used in PublicStockOnRamp and PublicStockOffRamp lack investor-specified deadline and nonce parameters so can be used multiple times by operatorsFixed
The report gives no description here.
LowUpgradeable contracts which are inherited from should use ERC7201 namespaced storage layouts or storage gaps to prevent storage collisionFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Securitize’s security record
SecuritizeSecurity firm
Cyfrin28 projects reviewed · 79 reports · latest Sep 2026
See Cyfrin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us