Tori Finance audit

SherlockCode version: not recorded (see the report)

Sherlock reviewed Tori Finance (Tori Finance audit) on 22 Jan 2026: 22 findings, 0 critical; 15 marked fixed, 7 acknowledged.

No open critical findings
Open the reportOpen Tori Finance’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings22

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium025
Low059
MediumBypassing TrUSD Rate Limits via StakedTrUSD BridgingAcknowledged

The report gives no description here.

MediumLack of on-chain oracle circuit breaker creates arbitrage risk during collateral de-pegAcknowledged

The report gives no description here.

LowBlacklist manager can remove themselves from blacklistAcknowledged

The report gives no description here.

LowBlacklist transactions can be frontrunAcknowledged

The report gives no description here.

LowremoveAllowedToken inadvertently blocks users from redeeming collateral, causing fund freezingAcknowledged

The report gives no description here.

LowRoute validation does not check for duplicate addressesAcknowledged

The report gives no description here.

LowtransferCollateral does not account for fee-on-transfer tokens leading to under-collateralized mintingAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Tori Finance’s security record

Tori Finance
Audits2 audits by 2 firmsLast audit Mar 2026, by Nethermind Security.
Critical findingsNo open critical findingsAcross 2 reports.
Open Tori Finance’s security record

Security firm

Sherlock

5 projects reviewed · 7 reports · latest Jun 2026

See Sherlock’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us