Securitize EVM Whitelister Audit Report

Cyfrin11 Feb 2026Code version: not recorded (see the report)

Audit · firm’s term: audit report

Part of Cyfrin’s series

Cyfrin reviewed Securitize (Securitize EVM Whitelister Audit Report) on 11 Feb 2026: no findings reported.

No open critical findings

Open the report Open Securitize’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings0

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	0
Low	0	0	0

Marked Gas or Informational by the firm. Not counted as findings.

GasWhitelister::whitelist duplicates checks already performed in RegistryService::addWalletAcknowledged

The report gives no description here.

GasBaseWhitelister::addOperator, removeOperator should use _grantRole and _revokeRole directly and only emit events when they return trueFixed

The report gives no description here.

InformationalImplement recommended changes to proposed vault whitelister standardFixed

The report gives no description here.

InformationalIncorrect pragma as support for defining operators on user-defined value types was added in Solidity 0.8.19Fixed

The report gives no description here.

InformationalPermissionFlags::and function will encode the permission for SWAP_AL- LOWED AND LIQUIDITY_ALLOWED as if the account would have NONE permissionsFixed

The report gives no description here.

InformationalPermissionFlags::hasFlag can’t be used to check for Permission- Flag::NONEFixed

The report gives no description here.

InformationalPermissionFlags::hasFlag inconsistent validation for combined flagsFixed

The report gives no description here.

InformationalPermissionFlags::hasFlag incorrectly grants ALL_PERMISSIONS to PermissionFlag::LIQUIDITY_ALLOWED and PermissionFlag::SWAP_ALLOWEDFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Securitize’s security record

Securitize

Audits37 audits by 2 firmsLast audit Sep 2026, by Cyfrin.

Critical findingsNo open critical findingsAcross the 37 reports, 6 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Securitize’s security record

Security firm

Cyfrin

28 projects reviewed · 79 reports · latest Sep 2026

See Cyfrin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.