Multiliquid SVM security assessment
Audit · firm’s term: security assessment
Zellic reviewed Multiliquid SVM (Multiliquid SVM security assessment) on 14 Aug 2026: 7 findings, 0 critical; 5 marked fixed, 2 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings19
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 1 | 3 |
| Low | 0 | 1 | 2 |
Marked Informational by the firm. Not counted as findings.
InformationalClosing one pair requires clearing the LP's shared Treasury positionAcknowledged
The report gives no description here.
InformationalFailure of the fee-token NAV disables every swapAcknowledged
The report gives no description here.
InformationalImmediate LP fee changes can invalidate swaps without quote limitsAcknowledged
The report gives no description here.
InformationalNAV aggregation fails closed when any configured source is unavailableAcknowledged
The report gives no description here.
InformationalTreasury losses are realized by the users who redeem lastAcknowledged
The report gives no description here.
InformationalTreasury-token transfers do not transfer the corresponding redemption entitlementAcknowledged
The report gives no description here.
Informationalclose_pair performs an unguarded hook-aware zero-amount transferFixed
The report gives no description here.
InformationalDeposits can be accepted before the first APY entry makes redemption possibleFixed
The report gives no description here.
InformationalDuplicate NAV sources can bias the aggregated priceFixed
The report gives no description here.
InformationalGlobal configuration initialization is not restricted to the upgrade authorityFixed
The report gives no description here.
Show 2 more
InformationalManager's ambient signature is exposed to asset transfer hooksFixed
The report gives no description here.
InformationalTreasury deposit and redeem lack slippage and deadline protectionFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Multiliquid SVM’s security record
Multiliquid SVMSecurity firm
Zellic62 projects reviewed · 77 reports · latest Aug 2026
See Zellic’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us