Solv Protocol - BTC Redemption

Quantstamp15 Dec 2025Code version: not recorded (see the report)

Quantstamp reviewed Solv Protocol (Solv Protocol - BTC Redemption) on 15 Dec 2025: 5 findings, 0 critical; 2 marked fixed, 3 open.

No open critical findings

Open the report Open Solv Protocol’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings5

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	0	0
Medium	0	0
Low	3	2

LowMissing Event Emission When `pendingAdmin` Is ClearedFixed

When `acceptAdmin()` is called, the `pendingAdmin` variable is deleted without emitting an event that reflects its change to the zero address. While a `NewAdmin` event is emitted for the admin change, the lack of an explicit event for the `pendingAdmin` update can lead to inconsistencies for off-chain indexers or monitoring systems that rely on events to track the lifecycle of `pendingAdmin`.

LowWithdraw Fee Rate Has No Explicit Upper BoundFixed

The `withdrawFeeRate` parameter has no explicit upper bound enforced at the contract level. Although the calculation includes a safety check: `require(withdrawFee <= solvBTCAmount_)` this still allows configurations where the effective fee can approach 100% of the redemption amount, effectively resulting in near-zero `solvBTC` output for users, minimizing withdrawals amount for all users.