Securitize Vault V2 and RWASegWrap Audit Report

Cyfrin4 Aug 2025Code version: not recorded (see the report)

Audit · firm’s term: audit report

Part of Cyfrin’s series

Cyfrin reviewed Securitize (Securitize Vault V2 and RWASegWrap Audit Report) on 4 Aug 2025: 8 findings, 0 critical; all marked fixed.

No open critical findings

Open Securitize’s security record

The original report was removed from its address (seen 18 Oct 2026).

Trustblock does not review code.

Findings8

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	1
Low	0	0	7

MediumShared configuration parameters across different asset types in vault deployers leads to incorrect pricing and fee calculationsFixed

The report gives no description here.

LowIncomplete mapping updates in setVault function cause vault address inconsistenciesFixed

The report gives no description here.

LowInconsistency between function name and documentation in getUnderlyingAssetFixed

The report gives no description here.

LowIncorrect allowance check in transfer functions prevents users from transferring their own tokensFixed

The report gives no description here.

LowMissing notEmptyURI modifier during initializationFixed

The report gives no description here.

LowMissing storage gap in upgradeable parent contract causes storage slot collision riskFixed

The report gives no description here.

LowUnsafe ERC20 operations can cause unexpected failures with non-standard tokensFixed

The report gives no description here.

LowUpgradeable contract initializer not disabled in constructor allows implementation contract initializationFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Securitize’s security record

Securitize

Audits37 audits by 2 firmsLast audit Sep 2026, by Cyfrin.

Critical findingsNo open critical findingsAcross the 37 reports, 6 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Securitize’s security record

Security firm

Cyfrin

28 projects reviewed · 79 reports · latest Sep 2026

See Cyfrin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.