Deri Protocol: Deri-V4 audit

PeckShieldCode version: not recorded (see the report)

Audit · firm’s term: smart contract audit

PeckShield reviewed Deri V4 (Deri Protocol: Deri-V4 audit) on 27 Mar 2025: 11 findings, 0 critical; 10 marked fixed, 1 open.

No open critical findings
Open the reportOpen Deri V4’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings11

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High002
Medium106
Low002
HighIncorrect Account Cache During Margin RemovalFixed

The report gives no description here.

HighIncorrect transfer_out() Logic in gatewayFixed

The report gives no description here.

MediumArithmetic Underflow Avoidance in gatewayFixed

The report gives no description here.

MediumImproper i256::rescale() LogicFixed

The report gives no description here.

MediumImproper request_add_margin_b0() Logic in gatewayFixed

The report gives no description here.

MediumImproved Liquidity Addition Logic in gatewayFixed

The report gives no description here.

MediumPossibly Incorrect Removal Amount in Liquidity UpdateFixed

The report gives no description here.

MediumRevisited check_b_token_consistency() Logic in gatewayFixed

The report gives no description here.

LowImproved Admin Transition Logic in global_stateFixed

The report gives no description here.

LowIncomplete FinishAddMargin Event Upon Margin Addition)Fixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Deri V4’s security record

Deri V4
Audits2 audits by 1 firmLast audit Mar 2025, by PeckShield.
Critical findingsNo open critical findingsAcross 2 reports.
Open Deri V4’s security record

Security firm

PeckShield

181 projects reviewed · 247 reports · latest Apr 2026

See PeckShield’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us