Propeller Heads Turbine
Audit · firm’s term: Security Assessment
Trail of Bits reviewed Propeller Heads (Propeller Heads Turbine) on 31 Mar 2026: 13 findings, 0 critical; 11 marked fixed, 2 open.
Report hosted on GitHub.
Trustblock does not review code.
Findings21
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 3 |
| Medium | 2 | 0 | 4 |
| Low | 0 | 0 | 4 |
Marked Informational by the firm. Not counted as findings.
InformationalRace conditions are present in filesystem operationsOpen
The report gives no description here.
InformationalDocumentation for running tests needs to be updatedFixed
The report gives no description here.
InformationalMissing block number validation in pool state updatesFixed
The report gives no description here.
InformationalMissing minimum buy amount validation allows users to receive less than specified minimumFixed
The report gives no description here.
InformationalOff-by-one-second discrepancy in speedbump enforcement between on-chain and off-chain pathsFixed
The report gives no description here.
InformationalPermitSingle and PermitBatch’s From implementations can panic in U48::fromFixed
The report gives no description here.
Informationalserialize_struct argument does not match number of serialize_field callsFixed
The report gives no description here.
InformationalU256 arithmetic errors silenced with unwrap_orFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Propeller Heads’s security record
Propeller HeadsSecurity firm
Trail of Bits29 projects reviewed · 47 reports · latest Sep 2026
See Trail of Bits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us