Strategy Builder Plugin Audit Report
Cyfrin reviewed Pecunity (Strategy Builder Plugin Audit Report) on 17 Jul 2025: 9 findings, 0 critical; all marked fixed.
The original report was removed from its address (seen 17 Oct 2026).
Trustblock does not review code.
Findings9
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 5 |
| Low | 0 | 0 | 3 |
HighMissing access control on critical FeeController settersFixed
The report gives no description here.
MediumAutomation DoS via blacklisted or reverting fee recipientsFixed
The report gives no description here.
MediumDoS of strategy execution due to array indices out of boundsFixed
The report gives no description here.
MediumFee calculations break when token decimals are different from 18Fixed
The report gives no description here.
MediumMissing staleness check in PriceOracle::getTokenPriceFixed
The report gives no description here.
MediumVolume-based fee can be bypassed with a wrapper contractFixed
The report gives no description here.
LowAccumulation of dust amounts due to rounding in _tokenDistribution()Fixed
The report gives no description here.
LowautomationsToIndex storage is not correctly reset when deleting automationsFixed
The report gives no description here.
LowDoS of automation due to potential zero value transfer revertsFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Pecunity’s security record
PecunitySecurity firm
Cyfrin28 projects reviewed · 79 reports · latest Sep 2026
See Cyfrin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us