The Rig audit
Oak Security reviewed The Rig (The Rig audit) on 1 Jul 2025: 19 findings, 0 critical; 13 marked fixed, 6 acknowledged.
Report hosted on GitHub.
Statuses are the security firm’s own, from this report. Trustblock does not review code.
Findings19
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 2 | 1 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 4 | 12 |
HighMissing price staleness check may lead to incorrect stFUEL mintingFixed
The report gives no description here.
LowIncomplete interface definitionFixed
The report gives no description here.
LowInconsistent invariant enforcement enables misconfiguration in the price submission logicFixed
The report gives no description here.
LowIncorrect round end timestampFixed
The report gives no description here.
LowInteger underflow in the deviation threshold enables DoS for price submissionsFixed
The report gives no description here.
LowLack of event emission for the setRigTreasury functionFixed
The report gives no description here.
LowLack of initial price validation enables permanent DoS in the price feedFixed
The report gives no description here.
LowMark an expired price feed round as failed, regardless of whether the minimum submission count is metFixed
The report gives no description here.
LowMissing address validationFixed
The report gives no description here.
LowMissing event emission on pauseFixed
The report gives no description here.
Show 3 more
LowMissing price feed configuration variable validationFixed
The report gives no description here.
LowMissing slippage protection for depositsFixed
The report gives no description here.
LowThe withdraw_to_l1_rig function mistakenly refers to stFUEL instead of FUEL tokensFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of The Rig’s security record
The RigSecurity firm
Oak Security33 projects reviewed · 60 reports · latest May 2026
See Oak Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us