swBTC Smart Contracts

ChainSecurityFiles named in the report

Audit

ChainSecurity reviewed Swell (swBTC Smart Contracts) on 6 Sep 2024: 7 findings, 0 critical; all marked fixed.

No open critical findings
Open the reportOpen Swell’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium002
Low005
MediumIncorrect Withdrawal Amount When Opening Multiple RequestsFixed

The report gives no description here.

MediumWithdrawals Can Be DOS by a Malicious UserFixed

The report gives no description here.

LowAeraStrategy May Have Locked FundsFixed

The report gives no description here.

LowAllowances Not Updated When Changing VaultFixed

The report gives no description here.

LowLocked SharesFixed

The report gives no description here.

LowSetting a Wrong Address as the vaultAera Can DOSFixed

The report gives no description here.

LowVyper VersionFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (17)

  • src/yearnVault/DelayedWithdraw.sol
  • src/yearnVault/Keeper.sol
  • src/yearnVault/RegistryFactory.sol
  • src/yearnVault/WithdrawLimitModule.sol
  • src/yearnVault/DebtAllocator.sol
  • src/tokenisedStrategy/TokenizedStrategy.sol
  • src/tokenisedStrategy/Hooks.sol
  • src/yearnVault/DebtAllocatorFactory.sol
  • src/tokenisedStrategy/BaseHooks.sol
  • src/yearnVault/VaultFactory.vy
  • src/yearnVault/RoleManager.sol
  • src/tokenisedStrategy/BaseStrategy.sol
  • src/yearnVault/ReleaseRegistry.sol
  • src/yearnVault/Registry.sol
  • src/tokenisedStrategy/AeraStrategy.sol
  • src/yearnVault/Accountant.sol
  • src/yearnVault/VaultV3.vy

Part of Swell’s security record

Swell
Audits10 audits by 6 firmsLast audit Apr 2025, by CODESPECT.
Critical findingsNo open critical findingsAcross 10 reports.
Open Swell’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Sep 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us