Jito Tip Router

CertoraCode version: not recorded (see the report)

Audit · firm’s term: security assessment

Certora reviewed Jito (Jito Tip Router) on 13 Jan 2025: 14 findings, 6 critical; 9 marked fixed, 1 acknowledged, 4 open.

6 critical findings, fixed
Open the reportOpen Jito’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings14

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical006
High001
Medium011
Low401
CriticalBallot Box can be DoS-ed by filling it up with fake ballotsFixed

The report gives no description here.

CriticalBallot’s weight for previous vote doesn’t decrement on vote change, allowing attackerFixed

The report gives no description here.

CriticalReward distribution might be skipped to some operators during routingFixed

The report gives no description here.

CriticalSnapshot can be created for future epochs, assigning wrong stake weightsFixed

The report gives no description here.

CriticalSnapshotting can’t be completed if empty vault-operator delegations existFixed

The report gives no description here.

CriticalVoting can be done after routing started, leading to a DoS for the routerFixed

The report gives no description here.

HighBase router resumes with wrong rewards, distributing low amounts for operatorsFixed

The report gives no description here.

Mediumrestaking_config isn’t verified, allowing to supply a fake accountFixed

The report gives no description here.

LowRouter does one less iteration than it shouldFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Jito’s security record

Jito
Audits1 audit by 1 firmLast audit Jan 2025, by Certora.
Critical findingsNo open critical findingsIn that report, 6 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Jito’s security record

Security firm

Certora

20 projects reviewed · 46 reports · latest Aug 2026

See Certora’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us