Zodial
Ackee Blockchain Security reviewed Zodial on 22 Jul 2026: 47 findings, 0 critical; 33 marked fixed, 8 acknowledged, 6 open.
Report hosted on GitHub.
Trustblock does not review code.
Findings47
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 2 |
| Medium | 2 | 1 | 12 |
| Low | 3 | 7 | 19 |
Mediuminit_global_fee_state is unauthenticated, allowing any caller to win the deploy/init race and become permanent global_fee_adminAcknowledged
The report gives no description here.
LowEmode clone skips configuration validationAcknowledged
The report gives no description here.
LowFee state propagation has no version check between FeeState and group.fee_state_cacheAcknowledged
The report gives no description here.
LowIsolated assets can be stranded after equity-based bankruptcy disablementAcknowledged
The report gives no description here.
LowJupLend claim_account is unchecked and trusted to remain unused by the CPIAcknowledged
The report gives no description here.
Lowjuplend_init_position activates the bank without refreshing or verifying minted fTokensAcknowledged
The report gives no description here.
Lowlending_pool_withdraw_fees_permis sionless forwards direct vault donationsAcknowledged
The report gives no description here.
Lowvalidate_instructions allowlist of external-program ixes before the start ix relies on stable read-mostly semanticsAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Zodial’s security record
ZodialSecurity firm
Ackee Blockchain Security39 projects reviewed · 81 reports · latest Jul 2026
See Ackee Blockchain Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us