Tangent security review

Pashov Audit Group10 Dec 2025Code version: not recorded (see the report)

Audit · firm’s term: security review

Pashov Audit Group reviewed Tangent (Tangent security review) on 10 Dec 2025: 10 findings, 0 critical; 8 marked fixed, 2 acknowledged.

No open critical findings

Open the report Open Tangent’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings10

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	2
Low	0	2	6

MediumCurveGaugeMarket does not collect CRV allocation as rewardFixed

The report gives no description here.

MediumReceipt-token + Zap incorrectly handled in liquidationFixed

The report gives no description here.

LowDoS in claimUnderlyingRewards due to strict transfer requirements on all reward tokensFixed

The report gives no description here.

LowMissing events for access control role changesFixed

The report gives no description here.

LowMissing referrer in StakeDao vault deposit causing lost rewardsFixed

The report gives no description here.

LowNo check if pool lpToken matches market collateralTokenFixed

The report gives no description here.

LowPermanent DoS in claimExtraRewards from wrong array input typeFixed

The report gives no description here.

LowReceipt token handling error in leverageFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Tangent’s security record

Tangent

Audits1 audit by 1 firmLast audit Dec 2025, by Pashov Audit Group.

Critical findingsNo open critical findingsIn 1 report.

Open Tangent’s security record

Security firm

Pashov Audit Group

86 projects reviewed · 165 reports · latest Aug 2026

See Pashov Audit Group’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.