Strata Shares Cooldown Audit Report

Cyfrin23 Jan 2026Code version: not recorded (see the report)

Audit · firm’s term: audit report

Cyfrin reviewed Strata (Strata Shares Cooldown Audit Report) on 23 Jan 2026: 9 findings, 0 critical; all marked fixed.

No open critical findings

Open the report Open Strata’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	6
Low	0	0	3

Marked Informational or Gas by the firm. Not counted as findings.

InformationalCoverage depends on raw sharesCooldown balances and can be griefedAcknowledged

The report gives no description here.

InformationalCoverage manipulation enables whale to consistently obtain best exit terms for withdrawalsAcknowledged

The report gives no description here.

InformationalParameter at in SharesCooldown::finalize is functionally redundantAcknowledged

The report gives no description here.

GasRedundant user parameter as it can only be set to msg.sender on SharesCooldown::finalizeWithFee and SharesCooldown::cancel functionsAcknowledged

The report gives no description here.

InformationalSharesCooldown Merges Redemption Requests, Making Them Indivisible for Cancel and Early ExitAcknowledged

The report gives no description here.

InformationalsUSDe withdrawals can be blocked by receiver restrictionsAcknowledged

The report gives no description here.

InformationalUnreachable code on SharesCooldown::requestRedeemAcknowledged

The report gives no description here.

InformationalMisleading owner field in OnMetaWithdraw eventFixed

The report gives no description here.

InformationalMisleading revert message in onlyUser modifierFixed

The report gives no description here.

InformationalSharesCooldown Does Not Enforce Spec-Defined Pause Lockup RulesFixed

The report gives no description here.

Show 2 more

GasSkip call to CDO::accrueFee when there are no fees to chargeFixed

The report gives no description here.

InformationalTranche::maxWithdraw can understate the max withdrawal for the SharesCooldown contractFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Strata’s security record

Strata

Audits7 audits by 3 firmsLast audit Jan 2026, by Cyfrin.

Critical findingsNo open critical findingsAcross the 7 reports, 3 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Strata’s security record

Security firm

Cyfrin

28 projects reviewed · 79 reports · latest Sep 2026

See Cyfrin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.