Aida Circle - Pentest

CertiKCode version: not recorded (see the report)

Penetration test of off-chain systemsNot counted as an audit report

CertiK reviewed Circle (Aida Circle - Pentest) on 26 Sep 2022: 3 findings, 0 critical; all marked fixed.

No open critical findings
Open the reportOpen Circle’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings3

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium000
Low003
LowClickjackingFixed

The HTTP response of the GET request to "https://dev.aida.darweb3.com" and "https://dev.darweb3.com/" doesn't contain any security headers to prevent the website from loading in an iframe.

LowNo Rate limitingFixed

The confirmation link before making a transaction enables the user to receive an email with a link to confirm the transaction. We found that the email could be sent repeatedly.

LowWallet disconnect is vulnerable to CSRFFixed

This API is used to disconnect the wallet. When the user clicks the disconnect button on the web page, the application sends a POST request to the server. We found that this `POST` request is vulnerable to CSRF attacks.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Circle’s security record

Circle
Audits7 audits by 2 firmsLast audit Feb 2026, by ChainSecurity.
Critical findingsNo open critical findingsAcross the 7 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open Circle’s security record

Security firm

CertiK

1,045 projects reviewed · 1,376 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us