Solv Protocol- Vault Guardian

QuantstampRepository at commit 80300ac

Audit

Quantstamp reviewed Solv Protocol (Solv Protocol- Vault Guardian) on 25 Mar 2024: 20 findings, 0 critical; 14 marked fixed, 5 acknowledged, 1 open.

No open critical findings
Open the reportOpen Solv Protocol’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings20

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High003
Medium101
Low0510
MediumBypass Solv Vault Guardian Checks Using Module ExecutionOpen

Safe can add modules that introduce additional functionalities beyond the core Safe capabilities. While these modules enhance the utility of Safe by allowing custom features, they also carry the ability to execute arbitrary transactions once installed. Currently, transactions initiated by these modules do not undergo guardian checks, presenting a loophole if the `enableModule()` function is permitted by the guardian settings. This lack of guardian oversight for module-executed transactions can be used to bypass Solv vault guardian checks.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (36)

  • https://github.com/solv-finance/solv-vault-guardian/src/utils/Governable.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/package.json at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/authorizations/gmxv1/GMXV1Authorization.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/test/authorizations/ERC20TransferAuthorization.t.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/authorizations/lendle/LendleAuthorizationACL.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/test/authorizations/GMXV2Authorization.t.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/test/SolvVaultGuardian.t.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/test/common/SolvVaultGuardianBaseTest.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/common/SolvVaultGuardianBase.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/authorizations/agni/AgniAuthorization.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/authorizations/ERC20TransferAuthorization.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/common/Type.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/utils/Multicall.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/remappings.txt at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/authorizations/gmxv1/GMXV1AuthorizationACL.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/authorizations/gmxv2/GMXV2AuthorizationACL.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/yarn.lock at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/hardhat.config.ts at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/LICENSE at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/common/BaseACL.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/authorizations/SolvOpenEndFundAuthorization.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/foundry.toml at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/authorizations/CoboArgusAdminAuthorization.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/libraries/BytesLib.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/.gitmodules at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/.gitignore at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/authorizations/gmxv2/GMXV2Authorization.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/common/BaseAuthorization.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/authorizations/agni/AgniAuthorizationACL.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/SolvVaultGuardianForSafe13.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/authorizations/ERC20ApproveAuthorization.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/libraries/Path.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/README.md at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/authorizations/SolvOpenEndFundAuthorizationACL.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/authorizations/lendle/LendleAuthorization.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025
  • https://github.com/solv-finance/solv-vault-guardian/src/common/FunctionAuthorization.sol at commit 80300ac901a0019448bc87b39cfebde1f27b1025

Part of Solv Protocol’s security record

Solv Protocol
Audits6 audits by 3 firmsLast audit Dec 2025, by Quantstamp.
Critical findingsNo open critical findingsAcross 6 reports.
Open Solv Protocol’s security record

Security firm

Quantstamp

236 projects reviewed · 332 reports · latest Oct 2026

See Quantstamp’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us