Fyde security review
Audit · firm’s term: security review
Pashov Audit Group reviewed Fyde (Fyde security review) on 14 Mar 2024: 19 findings, 1 critical; 6 marked fixed, 13 acknowledged.
Findings19
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 1 |
| Medium | 0 | 8 | 3 |
| Low | 0 | 5 | 1 |
MediumAttacker can inflate share price and cause loss for usersAcknowledged
The report gives no description here.
MediumAttacker can reenter RelayerV2 with ERC777 tokens and steal fundsAcknowledged
The report gives no description here.
MediumAUM value update can be sandwiched to extract value from the protocolAcknowledged
The report gives no description here.
MediumCentralization risk that causes fund loss or lockAcknowledged
The report gives no description here.
MediumCode doesn't validate stale AUM valuesAcknowledged
The report gives no description here.
MediumOracleModule assumes that all Chainlink feeds have a heartbeat of 24 hoursAcknowledged
The report gives no description here.
MediumSlippage check may be inefficient in deposit() when _keepGovRights=TrueAcknowledged
The report gives no description here.
MediumUsers cannot burn their TRSY in exchange for assets when RelayerV2.withdraw() is pausedAcknowledged
The report gives no description here.
LowChainlinkAdapter does not check for round completeness, which may lead to stale dataAcknowledged
The report gives no description here.
LowFirst depositor will always pay taxesAcknowledged
The report gives no description here.
Show 3 more
LowProtocol can be exploited by malicious KeeperAcknowledged
The report gives no description here.
LowTarget concentration for deposits and withdraws is not checked to be equal to 100%Acknowledged
The report gives no description here.
LowWhen Chainlink price isn't available, an attacker can extract value from the protocolAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Fyde’s security record
FydeSecurity firm
Pashov Audit Group30 projects reviewed · 53 reports · latest Jul 2026
See Pashov Audit Group’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us