HeyElsa V2

QuillAudits1 Jan 2026Code version: not recorded (see the report)

QuillAudits reviewed HeyElsa (OFT bridge) (HeyElsa V2) on 1 Jan 2026: 5 findings, 0 critical; all marked fixed.

No open critical findings

Open the report Open HeyElsa (OFT bridge)’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	1
Medium	0	0	4
Low	0	0	0

HighFrontrunnable Stake Index Reordering Can Cause Unintended Early-Unstake PenaltiesFixed

The report gives no description here.

MediumGasless Staking Authorization Is Frontrunnable, Allowing Tier ManipulationFixed

The report gives no description here.

MediumIncorrect STAKE_AUTHORIZATION_TYPEHASH Breaks Gasless Staking AuthorizationFixed

The report gives no description here.

MediumLack of Partial Reward Claims Can Permanently Lock User RewardsFixed

The report gives no description here.

MediumTime-Based Reward Accrual Is Not Bounded by Reward Pool, Leading to Severe Reward InsolencyFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of HeyElsa (OFT bridge)’s security record

HeyElsa (OFT bridge)

Audits8 audits by 2 firmsLast audit May 2026, by QuillAudits.

Critical findingsNo open critical findingsAcross 8 reports.

Open HeyElsa (OFT bridge)’s security record

Security firm

QuillAudits

449 projects reviewed · 586 reports · latest Nov 2026

See QuillAudits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.