Securitize Whitelist ACL Support Audit Report

CyfrinCode version: not recorded (see the report)

Cyfrin reviewed Securitize (Securitize Whitelist ACL Support Audit Report) on 2 Jun 2026: 1 finding, 0 critical; it is acknowledged, not fixed.

No open critical findings
Open Securitize’s security record

The original report was removed from its address (seen 16 Oct 2026).

Trustblock does not review code.

Findings1

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium000
Low010

Marked Informational by the firm. Not counted as findings.

InformationalHardcoded MINT_CONFIG_DISCRIMINATOR = 1 duplicates upstream TACL state with no compile-time tie-backAcknowledged

The report gives no description here.

InformationalSPL sRFC-37 access-control thaw forwards caller-selected CPI accounts without tying them to the validated authority pathAcknowledged

The report gives no description here.

InformationalWhitelisted event does not record which freeze-authority path was usedAcknowledged

The report gives no description here.

InformationalgetWhitelistIxs is not checking the ownership of the tokenAccounts passed with tx ownerFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Securitize’s security record

Securitize
Audits37 audits by 2 firmsLast audit Sep 2026, by Cyfrin.
Critical findingsNo open critical findingsAcross the 37 reports, 6 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Securitize’s security record

Security firm

Cyfrin

28 projects reviewed · 79 reports · latest Sep 2026

See Cyfrin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us