Strata Shares Cooldown Audit Report

Cyfrin23 Jan 2026Code version: not recorded (see the report)

Audit · firm’s term: audit report

Cyfrin reviewed Strata (Strata Shares Cooldown Audit Report) on 23 Jan 2026: 9 findings, 0 critical; all marked fixed.

No open critical findings

Open the report Open Strata’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	6
Low	0	0	3

MediumAPR Targets are not updated when withdrawal requests are sent to the SharesCooldown to reflect the change on NAVs caused by the charged fees for the withdrawalFixed

The report gives no description here.

MediumFinalizing withdrawal requests on the SharesCooldown contract allows for third-parties to override user’s chosen output tokenFixed

The report gives no description here.

MediumIncrease in coverage can lead to a grief attack causing a DoS for previous withdrawal requestsFixed

The report gives no description here.

MediumJR Tranche is susceptible to bankrun scenarios given that SharesCooldown finalization allows to bypass minimumJrtSrtRatio and first withdrawers from JR Tranche get a better cooldown and fees comparedFixed

The report gives no description here.

MediumSharesCooldown instant finalization can be DoSed because of the UnstakeCooldown request limitsFixed

The report gives no description here.

MediumTranche::burnSharesAsFee can be used to manipulate the exchange rate to cause withdrawals to revert for legitimate usersFixed

The report gives no description here.

LowAllowance-Based Withdrawals Can Revert Due to Cooldown Request Slot LimitsFixed

The report gives no description here.

LowfinalizeWithFee lacks race conditioning protectionFixed

The report gives no description here.

LowInvalid validateRedemptionParams checkFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Strata’s security record

Strata

Audits7 audits by 3 firmsLast audit Jan 2026, by Cyfrin.

Critical findingsNo open critical findingsAcross the 7 reports, 3 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Strata’s security record

Security firm

Cyfrin

28 projects reviewed · 79 reports · latest Sep 2026

See Cyfrin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.