Strata - Update to Tranches

QuantstampRepository at commit ef6dbfd

Audit

Quantstamp reviewed Strata (Strata - Update to Tranches) on 21 Nov 2025: 1 finding, 0 critical; it is marked fixed.

No open critical findings
Open the reportOpen Strata’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings1

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium000
Low001
LowSuggestion for a Time Delay for Fee UpdatesFixed

The reviewed changes introduce the mechanic of a withdrawal fee, which a privileged address can set between 0 and 1% of the user’s withdrawal amount. As users might have deposited at a time without the concept of a withdrawal fee or with it being set at e.g. 0%, a sudden change to 1% has non-trivial consequences for user’s strategies. In order for users to have a sufficient time window to react to a change to the fee parameter, we propose adding a 24 hour delay between proposed new fee value and enforcing it on-chain.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (127)

  • https://github.com/Strata-Money/contracts-tranches/contracts/test/ethena/interfaces/IStakedUSDe.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/Tranche.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/oz/Proxy.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/test/MockMetaERC4626.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/cooldowns/ERC20Cooldown.spec.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/ERC4626Rewards.spec.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/base/CDOComponent.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/ethena/AaveAprPairFeed.spec.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/utils/$test.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/utils/$erc4626.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/deployments/deployments-hoodi.layout.json at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/test/ethena/interfaces/ISingleAdminAccessControl.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/PoC/Guardian/AccountingOnAprChangedSandwich.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/oracles/AprPairFeed.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/cooldowns/$testCooldown.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/interfaces/IErrors.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/utils/$accounting.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/TrancheDepositorSwap.spec.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/lens/integrations/TermmaxIntegration.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/test/ethena/interfaces/IStakedUSDeCooldown.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/PoC/Guardian/WithdrawGriefingDoS.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/PoC/Guardian/JrtSupplyRunaway.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/strategy/Strategy.spec.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/interfaces/IStrataCDO.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/test/MockUSDe.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/reserves/Reserve.spec.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/package.json at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/lens/integrations/PendleIntegration.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/MetaVaultPreviews.spec.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/lens/EulerLens.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/ERC4626.spec.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/deployments/deployments-eth.json at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/TrancheDepositor.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/interfaces/IAccounting.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/TrancheDepositor.spec.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/tasks/PlatformFactory.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/utils/$ethena.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/Proxies.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/test/MockStakedUSDe.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/Accounting.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/.vscode/settings.json at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/base/cooldown/CooldownBase.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/StrataCDO.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/test/ethena/StakedUSDe.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/strategies/ethena/sUSDeAprPairProvider.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/readme.md at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/PoC/Guardian/StrataProtocolDeploymentBase.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/src/platforms/Eth.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/test/MockERC4626.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/deployments/deployments-eth.layout.json at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/interfaces/IMetaVault.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/tsconfig.json at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/src/platforms/Tranches.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/lens/CDOLens.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/PoC/Guardian/AccountingRetroactiveAPR.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/base/cooldown/UnstakeCooldown.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/Strategy.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/utils/$strata.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/cooldowns/UnstakeCooldown.spec.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/governance/interfaces/IAccessControlManager.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/governance/AccessControlManager.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/src/platforms/Hoodi.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/tranches_math.md at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/test/MockStakedUSDS.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/strategies/ethena/sUSDeStrategy.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/structs/TActionState.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/utils/$tranche.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/interfaces/cooldown/IUnstakeHandler.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/governance/StrataMasterChef.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/interfaces/ITranche.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/accounting/Apr.spec.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/foundry.toml at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/interfaces/IDepositor.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/PoC/Guardian/AccountingRiskDoS.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/accounting/AccountingExecutor.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/cooldowns/Tranche.spec.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/src/constants.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/strategies/ethena/AaveAprPairProvider.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/lens/integrations/Interfaces.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/utils/$usde.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/src/deployments/TranchesDeployments.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/.gitmodules at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/strategies/ethena/IsUSDe.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/package-lock.json at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/config.js at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/src/utils/$ethena.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/.circleci/config.yml at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/feed/AprPairFeed.spec.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/src/platforms/Platforms.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/hardhat.config.js at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/interfaces/IAprPairFeed.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/src/utils/$apr.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/CDO.t.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/lens/CdoLens.spec.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/interfaces/ISwapRouter.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/oz/Beacon.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/ERC4626Fees.spec.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/accounting/Accounting.spec.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/governance/AccessControlled.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/PoC/Guardian/AccountingRiskLag.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/test/ethena/SingleAdminAccessControl.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/.gitignore at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/src/platforms/IPlatform.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/lens/integrations/EulerIntegration.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/PoC/Guardian/ReserveWithdrawalUnitMismatch.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/ethena/AprsProvider.spec.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/PoC/Guardian/AccessControlManagerGrantCall.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/test/ethena/USDeSilo.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/interfaces/IStrategy.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/test/ethena/interfaces/IUSDeSiloDefinitions.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/utils/$acc.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/PoC/Guardian/Guardian.t.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/base/cooldown/ERC20Cooldown.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/lens/IntegrationsLens.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/src/deployments/TimelockHandler.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/utils/ProtocolExecutor.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/utils/$erc20.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/tasks/deploy.act.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/PoC/Guardian/TrancheMaxMint.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/strategies/ethena/sUSDeCooldownRequestImpl.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/.github/workflows/test.yml at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/PoC/MaxMinJrt.spec.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/test/tranches/utils/$hh.ts at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/utils/UD60x18Ext.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/interfaces/ICDOComponent.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/contracts/tranches/interfaces/cooldown/ICooldown.sol at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2
  • https://github.com/Strata-Money/contracts-tranches/deployments/deployments-hoodi.json at commit ef6dbfd0b6abe61cc7364341a4894b72620ba8f2

Part of Strata’s security record

Strata
Audits7 audits by 3 firmsLast audit Jan 2026, by Cyfrin.
Critical findingsNo open critical findingsAcross the 7 reports, 3 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Strata’s security record

Security firm

Quantstamp

236 projects reviewed · 332 reports · latest Oct 2026

See Quantstamp’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us