Midas / Vault

HackenRepository at commit d84b0ed

Hacken reviewed Midas RWA (Midas / Vault) on 12 Jan 2024: 4 findings, 0 critical; 1 marked fixed, 3 open.

No open critical findings
Open Midas RWA’s security record

The original report was removed from its address (seen 7 Nov 2026).

Trustblock does not review code.

Findings8

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High100
Medium101
Low100

Marked Observation by the firm. Not counted as findings.

ObservationThe Minimum Deposit Check Is Not Applied To Initial DepositorsOpen

The report gives no description here.

ObservationImproperly Utilized AccessControlUpgradeable Leads To The High Level Of CentralizationFixed

The report gives no description here.

ObservationMissing checks for `address(0)`Fixed

The report gives no description here.

ObservationUnused State VariablesFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (36)

  • https://github.com/RedDuck-Software/midas-contracts/contracts/abstract/MidasInitializable.sol at commit d84b0ed
  • https://github.com/RedDuck-Software/midas-contracts/contracts/mTBILL.sol at commit d84b0ed
  • https://github.com/RedDuck-Software/midas-contracts/contracts/libraries/DecimalsCorrectionLibrary.sol at commit d84b0ed
  • https://github.com/RedDuck-Software/midas-contracts/contracts/access/WithMidasAccessControl.sol at commit d84b0ed
  • https://github.com/RedDuck-Software/midas-contracts/contracts/feeds/DataFeed.sol at commit d84b0ed
  • https://github.com/RedDuck-Software/midas-contracts/contracts/interfaces/IRedemptionVault.sol at commit d84b0ed
  • https://github.com/RedDuck-Software/midas-contracts/contracts/access/Blacklistable.sol at commit d84b0ed
  • https://github.com/RedDuck-Software/midas-contracts/contracts/interfaces/IMTbill.sol at commit d84b0ed
  • https://github.com/RedDuck-Software/midas-contracts/contracts/interfaces/IDepositVault.sol at commit d84b0ed
  • https://github.com/RedDuck-Software/midas-contracts/contracts/interfaces/IManageableVault.sol at commit d84b0ed
  • https://github.com/RedDuck-Software/midas-contracts/contracts/DepositVault.sol at commit d84b0ed
  • https://github.com/RedDuck-Software/midas-contracts/contracts/access/MidasAccessControl.sol at commit d84b0ed
  • https://github.com/RedDuck-Software/midas-contracts/contracts/interfaces/IDataFeed.sol at commit d84b0ed
  • https://github.com/RedDuck-Software/midas-contracts/contracts/access/MidasAccessControlRoles.sol at commit d84b0ed
  • https://github.com/RedDuck-Software/midas-contracts/contracts/abstract/ManageableVault.sol at commit d84b0ed
  • https://github.com/RedDuck-Software/midas-contracts/contracts/RedemptionVault.sol at commit d84b0ed
  • https://github.com/RedDuck-Software/midas-contracts/contracts/access/Pausable.sol at commit d84b0ed
  • https://github.com/RedDuck-Software/midas-contracts/contracts/access/Greenlistable.sol at commit d84b0ed
  • contracts/interfaces/IRedemptionVault.sol
  • contracts/libraries/DecimalsCorrectionLibrary.sol
  • contracts/DepositVault.sol
  • contracts/access/MidasAccessControl.sol
  • contracts/interfaces/IMTbill.sol
  • contracts/access/Pausable.sol
  • contracts/interfaces/IDepositVault.sol
  • contracts/mTBILL.sol
  • contracts/access/Greenlistable.sol
  • contracts/interfaces/IManageableVault.sol
  • contracts/RedemptionVault.sol
  • contracts/interfaces/IDataFeed.sol
  • contracts/access/Blacklistable.sol
  • contracts/abstract/MidasInitializable.sol
  • contracts/abstract/ManageableVault.sol
  • contracts/access/WithMidasAccessControl.sol
  • contracts/feeds/DataFeed.sol
  • contracts/access/MidasAccessControlRoles.sol

Part of Midas RWA’s security record

Midas RWA
Audits3 audits by 2 firmsLast audit Aug 2024, by Sherlock.
Critical findingsNo open critical findingsAcross 3 reports.
Open Midas RWA’s security record

Security firm

Hacken

361 projects reviewed · 501 reports · latest Nov 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us