Orderly Strategy Vault audit
Audit · firm’s term: security review
Guardian Audits reviewed Orderly Network (Orderly Strategy Vault audit) on 24 Feb 2025: 64 findings, 7 critical; 32 marked fixed, 31 acknowledged, 1 open.
Report hosted on GitHub.
Trustblock does not review code.
Findings64
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 7 |
| High | 0 | 2 | 4 |
| Medium | 1 | 7 | 8 |
| Low | 0 | 22 | 13 |
HighNewly Added Strategy Provider Will Not Receive LP DepositsAcknowledged
The report gives no description here.
HighWithdraw Message Sent Even If _validReceiver Check FailsAcknowledged
The report gives no description here.
MediumA Portion Of Frozen Fees Will Remain FrozenAcknowledged
The report gives no description here.
MediumEnabling Tokens Breaks ProtocolAcknowledged
The report gives no description here.
MediumInsufficient msgOptionsAcknowledged
The report gives no description here.
MediumPeriod Update Breaks When BatchingAcknowledged
The report gives no description here.
MediumRounding Up Will DoS When Funds Are WithdrawnAcknowledged
The report gives no description here.
MediumStrategy Deposit Might Fail Due To LimitAcknowledged
The report gives no description here.
MediumToken Losses On DepositAcknowledged
The report gives no description here.
LowA Hard-fork Can Disrupt MessagingAcknowledged
The report gives no description here.
Show 10 more
LowCentralization RisksAcknowledged
The report gives no description here.
LowCross-chain Communication May Be BlockedAcknowledged
The report gives no description here.
LowDebugging Checks And Test Code Left In Production CodeAcknowledged
The report gives no description here.
LowenableDepositFee Can Be PausedAcknowledged
The report gives no description here.
LowFloating PragmaAcknowledged
The report gives no description here.
LowGriefing Of Vault DepositsAcknowledged
The report gives no description here.
LowIncompatibility With CREATE2 On ZkSyncAcknowledged
The report gives no description here.
LowLack Of onlyProxy ModifierAcknowledged
The report gives no description here.
LowMinor Unallocated Remainders In Proportional LP AllocationAcknowledged
The report gives no description here.
LowNo Paused Check For WithdrawalsAcknowledged
The report gives no description here.
Show 10 more
LowNo Withdrawal Confirmation For SolanaAcknowledged
The report gives no description here.
LowProportional Allocation Overfunds Past PerformersAcknowledged
The report gives no description here.
LowRedundant Period ID ParameterAcknowledged
The report gives no description here.
LowsafeApprove() DeprecatedAcknowledged
The report gives no description here.
LowSalt Is Not Hashed With Deployer AddressAcknowledged
The report gives no description here.
LowSome Functions Can't Cover Fee CostsAcknowledged
The report gives no description here.
LowToken Deposits Cannot Be DisabledAcknowledged
The report gives no description here.
LowUnable To Reinitialize ContractsAcknowledged
The report gives no description here.
LowUnfair Performance Fee DistributionAcknowledged
The report gives no description here.
LowupdateUnclaimed Does Not Have Duplicate CheckAcknowledged
The report gives no description here.
Show 1 more
LowWarning About Paused DexVaultAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Orderly Network’s security record
Orderly NetworkSecurity firm
Guardian Audits15 projects reviewed · 99 reports · latest Aug 2026
See Guardian Audits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us