Zoth / Zeusd-Contracts

HackenFiles named in the report

Audit

Hacken reviewed Zoth (Zoth / Zeusd-Contracts) on 2 Jan 2025: 24 findings, 1 critical; 16 marked fixed, 8 open.

1 critical finding, fixed
Open the reportOpen Zoth’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings24

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High000
Medium500
Low3015
CriticalMissing Validation of Collateral Amount Allows User to Drain SubVault From All TokensFixed

The report gives no description here.

LowFloating PragmaFixed

The report gives no description here.

LowLack of @custom:oz-upgrades-unsafe-allow Comment in the ZeUSD_Router ContractFixed

The report gives no description here.

LowMisleading Documentation of TokenType Enum Numeric RepresentationFixed

The report gives no description here.

LowMissing _disableInitializers() in Upgradable Contract ConstructorFixed

The report gives no description here.

LowMissing Revert Allows Collateral Deposit Without Minting ZeUSDFixed

The report gives no description here.

LowMissing SafeERC20 Usage in ZeUSD_Router ContractFixed

The report gives no description here.

LowPublic Functions that Can be ExternalFixed

The report gives no description here.

LowRedundant ImportsFixed

The report gives no description here.

LowRepeated Zero Address ChecksFixed

The report gives no description here.

Show 6 more
LowRevert String Size OptimizationFixed

The report gives no description here.

LowSTABLE_PRICE Calculation Introduces Additional Complexity and Gas ConsumptionFixed

The report gives no description here.

LowThe removeDeposit() Function Reverts or Emits Incorrect EventsFixed

The report gives no description here.

LowUndefined Decimal Precision for LTV and Price Fields in CollateralDetailsFixed

The report gives no description here.

LowUnused Deposit Removal Functions Increase Code Complexity And SizeFixed

The report gives no description here.

LowUnused Error DefinitionFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (12)

  • contracts/libraries/DataTypes.sol
  • contracts/interfaces/ISubVault.sol
  • contracts/CollateralVault.sol
  • contracts/implementations/ZeUSD.sol
  • contracts/ZeUSD_Router.sol
  • contracts/interfaces/IFundVaultV2.sol
  • contracts/interfaces/IPriceOracle.sol
  • contracts/subVaults/USD0PPSubVault.sol
  • contracts/interfaces/IZeUSDRouter.sol
  • contracts/interfaces/IZeUSDOFT.sol
  • contracts/interfaces/ICollateralVault.sol
  • contracts/interfaces/IZeUSD.sol

Part of Zoth’s security record

Zoth
Audits2 audits by 2 firmsLast audit Jan 2025, by Hacken.
Critical findingsNo open critical findingsAcross the 2 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
IncidentIncident 1 Mar 2025Source: De.Fi incident database.
Open Zoth’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us