Orderly audit (July 2024)
Audit · firm’s term: security review
Guardian Audits reviewed Orderly Network (Orderly audit (July 2024)) on 1 Jul 2024: 41 findings, 5 critical; 29 marked fixed, 12 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings41
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 5 |
| High | 0 | 0 | 5 |
| Medium | 0 | 5 | 9 |
| Low | 0 | 7 | 10 |
CriticalInability To Transmit Messages To Vault ChainFixed
The report gives no description here.
CriticalRedeeming USDC Revenue Functionality BrokenFixed
The report gives no description here.
CriticalRemoved Request Is Always The LastFixed
The report gives no description here.
CriticalStepwise Jump In User Pending ValorFixed
The report gives no description here.
CriticalTokens Stuck In Proxyledger When Claiming VestingFixed
The report gives no description here.
HighClaim Rewards Callback Message Not ExecutableFixed
The report gives no description here.
HighDust Amount DoSFixed
The report gives no description here.
HighMissing whenNotPaused Modifier Causes Loss Of FundsFixed
The report gives no description here.
HighPartial Vesting Claim Requests DoS’edFixed
The report gives no description here.
HighValor Emitted Without CapFixed
The report gives no description here.
Show 10 more
MediumClaiming Rewards Possible When Distributor PausedFixed
The report gives no description here.
MediumIncorrect Access Control For setTotalUsdcInTreasureFixed
The report gives no description here.
MediumIncorrect Calculation Of USDC Required Per BatchFixed
The report gives no description here.
MediumMissing Validations For GrantsFixed
The report gives no description here.
MediumNo Storage Gaps In Upgradable ContractsFixed
The report gives no description here.
MediumSignatures in Valor can be reusedFixed
The report gives no description here.
MediumStaking esOrder Without BalanceFixed
The report gives no description here.
MediumUsers May Receive Rewards For Only 1 BatchFixed
The report gives no description here.
MediumVesting Claims DoS’ed With OFT Token UpdateFixed
The report gives no description here.
LowCEI is not followed in LockedTokenVault.claim()Fixed
The report gives no description here.
Show 9 more
LowfixBatchValorToUsdcRate May Use Stale RateFixed
The report gives no description here.
LowImplementation Contracts Can Be Initialized By AnyoneFixed
The report gives no description here.
LowIncorrect Error Message During WithdrawOrderFixed
The report gives no description here.
LowMisleading CommentsFixed
The report gives no description here.
LowRedundant Parameter In claimRewards()Fixed
The report gives no description here.
LowTypoFixed
The report gives no description here.
LowUnused ErrorsFixed
The report gives no description here.
LowUse safeTransfer Instead Of transferFixed
The report gives no description here.
LowUsers Can’t Fully Claim VestingsFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Orderly Network’s security record
Orderly NetworkSecurity firm
Guardian Audits15 projects reviewed · 99 reports · latest Aug 2026
See Guardian Audits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us