Y2K Finance security assessment
Audit · firm’s term: security assessment
Zellic reviewed Y2k Finance (Y2K Finance security assessment) on 30 Oct 2023: 13 findings, 1 critical; all marked fixed.
Report hosted on GitHub.
Trustblock does not review code.
Findings13
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 3 |
| Medium | 0 | 0 | 4 |
| Low | 0 | 0 | 5 |
CriticalEmissions can be claimed multiple timesFixed
The report gives no description here.
HighThe lack of token addresses’ verificationFixed
The report gives no description here.
HighThe lack of verification of the payload dataFixed
The report gives no description here.
HighThe value of queuedWithdrawalTvl can be artificially inflatedFixed
The report gives no description here.
MediumConversion between different units does not account for token decimalsFixed
The report gives no description here.
MediumIncompatibility with USDT tokenFixed
The report gives no description here.
MediumIncorrect weights calculationFixed
The report gives no description here.
MediumMalicious users can profit due to temporary exchange rate fluctuationsFixed
The report gives no description here.
LowArray out-of-bound exception in _removeVaultsFixed
The report gives no description here.
LowIncorrect loop implementation in the function clearQueuedDepositsFixed
The report gives no description here.
Show 3 more
LowIncorrect return value in fetchEpochIds in case of invalid vaultsFixed
The report gives no description here.
LowThe function _removeVaults returns earlyFixed
The report gives no description here.
LowThe weightStrategy range violationFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Y2k Finance’s security record
Y2k FinanceSecurity firm
Zellic28 projects reviewed · 31 reports · latest Apr 2026
See Zellic’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us