Swell Audit Report
Audit · firm’s term: audit report
Cyfrin reviewed Swell (Swell Audit Report) on 23 Feb 2024: 13 findings, 0 critical; 10 marked fixed, 3 acknowledged.
The original report was removed from its address (seen 18 Oct 2026).
Trustblock does not review code.
Findings13
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 2 |
| Low | 0 | 3 | 8 |
Marked Gas or Informational by the firm. Not counted as findings.
GasRefactor RepricingOracle::handleReprice, _assertRepricingSnapshotValidity and _repricingPeriodDeltasAcknowledged
The report gives no description here.
GasUse constant for unchanging deposit amountAcknowledged
The report gives no description here.
GasCache array length outside of loops and consider unchecked loop incrementingFixed
The report gives no description here.
GasCache storage variables in memory when read multiple times without being changedFixed
The report gives no description here.
InformationalEmit ETHSent event when sending ethFixed
The report gives no description here.
InformationalMissing events in NodeOperatorRegistry update methodsFixed
The report gives no description here.
GasNodeOperatorRegistry::_parsePubKeyToString: Use shift operations rather than division/multiplication when dividend/factor is a power of 2Fixed
The report gives no description here.
InformationalRefactor identical code in NodeOperatorRegistry::getNextValidatorDetailsFixed
The report gives no description here.
GasRemove redundant pause checksFixed
The report gives no description here.
InformationalUse Checks-Effects-Interactions pattern in swEXIT::createWithdrawRequestFixed
The report gives no description here.
Show 1 more
GasUse totalReserves - rewardsInETH.unwrap() rather than _pre- RewardETHReserves - rewardsInETH.unwrap() + _newETHRewards in swETH::repriceFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Swell’s security record
SwellSecurity firm
Cyfrin28 projects reviewed · 79 reports · latest Sep 2026
See Cyfrin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us