vesu protocol security review

Cairo Security ClanFiles named in the report

Audit · firm’s term: security review

Cairo Security Clan reviewed Vesu (vesu protocol security review) on 18 Dec 2024: 1 finding, 0 critical; it is not marked fixed.

No open critical findings
Open the reportOpen Vesu’s security record
Report stored on IPFS. Content hash bafybeibhormyscnyhbveo2mu5b4h3zbqxcm3mccdztfgjtezvdlq7liy6y

Trustblock does not review code.

Findings1

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High100
Medium000
Low000
Highpermissionless rebalancing vulnerable to sandwich attacksOpen

The rebalance contract allows anyone to rebalance a position if its loan-to-value (LTV) deviates from the target LTV. The swap is executed based on user-provided parameters, enabling attackers to exploit the dex price through sandwich attacks. For example, attackers can manipulate the DEX price to profit from collateral value through price manipulation, causing loss to the position. Recommendations include restricting the input amount for swaps to match collateral_delta or debt_delta and introducing access control mechanisms. This issue has been mitigated by the client.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (1)

  • contracts1/src/rebalance.cairo

Part of Vesu’s security record

Vesu
Audits10 audits by 3 firmsLast audit Feb 2026, by Sherlock.
Critical findingsNo open critical findingsAcross 10 reports.
Open Vesu’s security record

Security firm

Cairo Security Clan

13 projects reviewed · 21 reports · latest Sep 2025

See Cairo Security Clan’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us