VaultCraft
Audit · firm’s term: smart contract review
Zokyo reviewed VaultCraft on 31 Dec 2024: 16 findings, 1 critical; 6 marked fixed, 10 acknowledged.
Trustblock does not review code.
Findings16
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 1 | 0 |
| Medium | 0 | 2 | 4 |
| Low | 0 | 7 | 1 |
HighA vault can be added to OracleVaultController after receiving deposits leading to incorrect priceAcknowledged
The report gives no description here.
MediumFee On Transfer Tokens May Break Virtual Accounting When Withdrawing And DepositingAcknowledged
The report gives no description here.
MediumNo slippage protection can lead to loss of fundsAcknowledged
The report gives no description here.
LowFunctions Across The Targeted Codebase Performs Operations Directly On State Variables Which May Result In Costly TransactionsAcknowledged
The report gives no description here.
LowInternal Functions Should Be Prefixed With _Acknowledged
The report gives no description here.
LowPotential Misconfiguration in setFees FunctionAcknowledged
The report gives no description here.
LowPrices by PushOracle come from a centralized authorityAcknowledged
The report gives no description here.
LowRedundant code and assumptions in tests can introduce bugs in the futureAcknowledged
The report gives no description here.
LowUnbounded Gas Usage in Batch UpdatesAcknowledged
The report gives no description here.
LowUse of Floating Solidity VersionAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of VaultCraft’s security record
VaultCraftSecurity firm
Zokyo89 projects reviewed · 131 reports · latest Feb 2025
See Zokyo’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us