Strata PreDeposit Audit Report
Audit · firm’s term: audit report
Cyfrin reviewed Strata (Strata PreDeposit Audit Report) on 11 Jun 2025: 21 findings, 1 critical; all marked fixed.
Report hosted on GitHub.
Trustblock does not review code.
Findings21
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 3 |
| Low | 0 | 0 | 16 |
Marked Gas or Informational by the firm. Not counted as findings.
GasPreDepositVault checks should fail earlyAcknowledged
The report gives no description here.
GasUsing calldata is more efficient to memory for read-only external function inputsAcknowledged
The report gives no description here.
GasCache identical storage readsFixed
The report gives no description here.
InformationalDisable initializers on upgradeable contractsFixed
The report gives no description here.
InformationalDon’t initialize to default valuesFixed
The report gives no description here.
InformationalInconsistency in currentPhase between pUSDeVault and yUSDeVaultFixed
The report gives no description here.
GasInline small internal functions only used onceFixed
The report gives no description here.
InformationalMissing zero deposit amount validationFixed
The report gives no description here.
InformationalPreDepositVault::initialize should not be exposed as publicFixed
The report gives no description here.
InformationalPrefix internal and private function names with _ characterFixed
The report gives no description here.
Show 7 more
GasRemove unused return value from pUSDeVault::stakeUSDe and explicitly revert if USDeAssets == 0Fixed
The report gives no description here.
GasSuperfluous vault support validation can be removed from pUSDeDepositor::depositFixed
The report gives no description here.
GasUnnecessarily complex iteration logic in MetaVault::redeemMetaVaults can be simplifiedFixed
The report gives no description here.
InformationalUse explicit sizes instead of uintFixed
The report gives no description here.
InformationalUse named mappings to explicitly denote the purpose of keys and valuesFixed
The report gives no description here.
GasUse named returns where this can eliminate in-function variable declarationFixed
The report gives no description here.
InformationalUse unchained initializers insteadFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Strata’s security record
StrataSecurity firm
Cyfrin28 projects reviewed · 79 reports · latest Sep 2026
See Cyfrin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us