Orderly Strategy Vault audit
Audit · firm’s term: security review
Guardian Audits reviewed Orderly Network (Orderly Strategy Vault audit) on 24 Feb 2025: 64 findings, 7 critical; 32 marked fixed, 31 acknowledged, 1 open.
Report hosted on GitHub.
Trustblock does not review code.
Findings64
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 7 |
| High | 0 | 2 | 4 |
| Medium | 1 | 7 | 8 |
| Low | 0 | 22 | 13 |
CriticalCompilation Error Due To Naming MismatchFixed
The report gives no description here.
CriticalhandleOpFromVault Function Does Not Scale DecimalsFixed
The report gives no description here.
CriticalInitial DoS State Contract Multiple Divisions By ZeroFixed
The report gives no description here.
CriticalMissing Access Control In sendMessage FunctionFixed
The report gives no description here.
CriticalrebalanceMint May Corrupt Ledger StateFixed
The report gives no description here.
CriticalSome ProtocolVault Functions Do Not Validate Properly The PayloadTypeFixed
The report gives no description here.
CriticalState Variables Are Updated After A Failed CheckFixed
The report gives no description here.
HighdepositToStrategy Function Will Always RevertFixed
The report gives no description here.
HighDOS Of updateLPAndStrategyFundFixed
The report gives no description here.
Highwithdraw2Contract Crosschain Flow Pays Withdrawal Fee TwiceFixed
The report gives no description here.
Show 10 more
HighWrong Cross-chain Manager UsageFixed
The report gives no description here.
MediumEvent Emitted With Incorrect ValuesFixed
The report gives no description here.
MediumFeeRate Changes Lead To Loss Of YieldFixed
The report gives no description here.
MediumMissing Payable Modifier FunctionFixed
The report gives no description here.
MediumNative Funds Locked In ContractFixed
The report gives no description here.
MediumNo Enforcement Of Required Bridging Fee In sendMessageFixed
The report gives no description here.
MediumOperators Could Replay Signatures In The ContractFixed
The report gives no description here.
MediumSP Deposits Are Not RefundedFixed
The report gives no description here.
MediumVault LZ Fee Can Be LostFixed
The report gives no description here.
LowaccountToken.assets Is Never DecreasedFixed
The report gives no description here.
Show 10 more
LowCCTP depositForBurn Has Maximum Burn Per TransactionFixed
The report gives no description here.
LowLack Of A Double Step TransferOwnership PatternFixed
The report gives no description here.
LowMarket Manager Flag Not ClearedFixed
The report gives no description here.
LowMixed DecimalsFixed
The report gives no description here.
LowMultiple TyposFixed
The report gives no description here.
LowPossible Inconsistent Decimal Precision ConfigurationFixed
The report gives no description here.
LowProtocolVault Claim Function Can Transfer Any Locked TokenFixed
The report gives no description here.
LowquoteOperation Function Always Assumes a LP_DEPOSIT PayloadFixed
The report gives no description here.
LowSlight withdrawAssets DiscrepancyFixed
The report gives no description here.
LowUnused Errors And EventsFixed
The report gives no description here.
Show 2 more
LowUnvalidated Params In setAllowedStrategyProviderFixed
The report gives no description here.
LowWrong Check In _convertToShares FunctionFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Orderly Network’s security record
Orderly NetworkSecurity firm
Guardian Audits15 projects reviewed · 99 reports · latest Aug 2026
See Guardian Audits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us