Midas audit

SherlockCode version: not recorded (see the report)

Audit competition · firm’s term: public contest

Sherlock reviewed Midas RWA (Midas audit) on 27 Aug 2024: 6 findings, 0 critical; all marked fixed.

No open critical findings
Open the reportOpen Midas RWA’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings6

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium006
Low000
MediumCorruptible Upgradability PatternFixed

The report gives no description here.

MediumDiscrepancy between spec and code: Vault admin cannot update tokensReceiver.Fixed

The report gives no description here.

MediumMBasisRedemptionVaultWithSwapper does not update mBasis daily limit or allowance when conducting mBasis->mTBill swap.Fixed

The report gives no description here.

MediumRedemptionVaultWIthBUIDL does not redeem full balance if BUIDL balance is less than 250k post transaction.Fixed

The report gives no description here.

MediumRedemptionVaultWIthBUIDL.sol#redeemInstant will always DoS due to incorrect contract call.Fixed

The report gives no description here.

MediumStandard redemption in RedemptionVault does not update token allowance.Fixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Midas RWA’s security record

Midas RWA
Audits3 audits by 2 firmsLast audit Aug 2024, by Sherlock.
Critical findingsNo open critical findingsAcross 3 reports.
Open Midas RWA’s security record

Security firm

Sherlock

46 projects reviewed · 67 reports · latest Sep 2026

See Sherlock’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us