Swell Audit Report

CyfrinCode version: not recorded (see the report)

Audit · firm’s term: audit report

Cyfrin reviewed Swell (Swell Audit Report) on 23 Feb 2024: 13 findings, 0 critical; 10 marked fixed, 3 acknowledged.

No open critical findings
Open Swell’s security record

The original report was removed from its address (seen 18 Oct 2026).

Trustblock does not review code.

Findings13

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium002
Low038
LowPrecision loss in swETH::reprice from unnecessary division before multiplicationAcknowledged

The report gives no description here.

LowRepricing with small rewards results in an invalid state where ETH reserves increase, swETH to ETH exchange rate increases, but no rewards are paid out to operators or treasuryAcknowledged

The report gives no description here.

LowswETH::reprice may run out of gas or become exorbitantly expensive when scaling to large number of validator operators due to iterating over them allAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Swell’s security record

Swell
Audits10 audits by 6 firmsLast audit Apr 2025, by CODESPECT.
Critical findingsNo open critical findingsAcross 10 reports.
Open Swell’s security record

Security firm

Cyfrin

28 projects reviewed · 79 reports · latest Sep 2026

See Cyfrin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us