Endgame Toolkit Deployment Scripts

ChainSecurityFiles named in the report

Audit

Part of ChainSecurity’s series

ChainSecurity reviewed Sky (Endgame Toolkit Deployment Scripts) on 12 Dec 2024: 6 findings, 0 critical; all marked fixed.

No open critical findings
Open Sky’s security record

The original report was removed from its address (seen 16 Oct 2026).

Trustblock does not review code.

Findings6

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High003
Medium000
Low003
HighStakingRewards rewardsDistribution Ownership InconsistencyFixed

The report gives no description here.

HighVest Minting Not PossibleFixed

The report gives no description here.

HighVest Ownership Not Transferred at DeploymentFixed

The report gives no description here.

LowMissing ChecksFixed

The report gives no description here.

LowSubProxy rely() to MCD End Instead of MCD ESM During InitializationFixed

The report gives no description here.

LowVest Should Not Have a Cliff PeriodFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (21)

  • script/CheckStakingRewardsDeploy.s.sol
  • script/dependencies/phase-1d/SkySpkFarmingInit.sol
  • script/09-CheckStakingRewardsDeployment.s.sol
  • script/dependencies/StakingRewardsInit.sol
  • script/dependencies/phase-1d/LsmkrSpkFarmingInit.sol
  • script/dependencies/StakingRewardsDeploy.sol
  • script/StakingRewardsDeploy.s.sol
  • script/dependencies/phase-1b/UsdsSkyFarmingInit.sol
  • script/phase-1d/40-SpkDeploy.s.sol
  • script/dependencies/VestedRewardsDistributionDeploy.sol
  • script/dependencies/VestInit.sol
  • script/dependencies/phase-0/FarmingInit.sol
  • script/dependencies/phase-1d/SpkSkyFarmingInit.sol
  • script/dependencies/SubProxyDeploy.sol
  • script/dependencies/SubProxyInit.sol
  • script/dependencies/SDAODeploy.sol
  • script/dependencies/VestedRewardsDistributionInit.sol
  • script/02-StakingRewardsInit.s.sol
  • script/dependencies/phase-1b/Usds01PreFarmingInit.sol
  • script/01-StakingRewardsDeploy.s.sol
  • script/dependencies/phase-1d/UsdsSpkFarmingInit.sol

Part of Sky’s security record

Sky
Audits150 audits by 3 firmsLast audit Sep 2026, by ChainSecurity.
Critical findingsNo open critical findingsAcross the 150 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Sky’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Sep 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us