Napier audit

Sherlock26 Feb 2024Code version: not recorded (see the report)

Audit competition · firm’s term: security review

Sherlock reviewed Napier (Napier audit) on 26 Feb 2024: 17 findings, 0 critical; 7 marked fixed, 10 acknowledged.

No open critical findings

Open the report Open Napier’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings17

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	2	2
Medium	0	8	5
Low	0	0	0

HighVictim's fund can be stolen due to rounding error and exchange rate manipulationAcknowledged

The report gives no description here.

HighYT holder are unable to claim their interestAcknowledged

The report gives no description here.

MediumBenign esfrxETH holders incur more loss than expectedAcknowledged

The report gives no description here.

MediumFRAX admin can adjust fee rate to harm Napier and its usersAcknowledged

The report gives no description here.

MediumNapier pool owner can unfairly increase protocol fees on swaps to earn more revenueAcknowledged

The report gives no description here.

MediumPermissioned rebalancing functions leading to loss of assetsAcknowledged

The report gives no description here.

MediumSFrxETHAdapter redemptionQueue waiting period can DOS adapter functionsAcknowledged

The report gives no description here.

MediumThe pool verification in NapierRouter is prone to collision attacksAcknowledged

The report gives no description here.

MediumUsers are unable to collect their yield if tranche is pausedAcknowledged

The report gives no description here.

MediumUsers unable to withdraw their funds due to FRAX admin actionAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Napier’s security record

Napier

Audits4 audits by 2 firmsLast audit Feb 2026, by Pashov Audit Group.

Critical findingsNo open critical findingsAcross 4 reports.

Open Napier’s security record

Security firm

Sherlock

46 projects reviewed · 67 reports · latest Sep 2026

See Sherlock’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.