Blueberry security review

Pashov Audit GroupCode version: not recorded (see the report)

Audit · firm’s term: security review

Pashov Audit Group reviewed Blueberry (Blueberry security review) on 15 Mar 2025: 14 findings, 0 critical; all marked fixed.

No open critical findings
Open the reportOpen Blueberry’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings14

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High005
Medium004
Low005
HighIncorrect erc20 transfer implementation between evm and core chainsFixed

The report gives no description here.

HighMalicious users may block other withdrawalsFixed

The report gives no description here.

HighUnapproved requests are not deducted from total assetsFixed

The report gives no description here.

HighUser can drain escrow via approved withdrawalsFixed

The report gives no description here.

HighWithdraw check can be bypassedFixed

The report gives no description here.

MediumIncorrect rounding in mint()Fixed

The report gives no description here.

MediumProtocol fee rounding can be weaponized for minimal earningsFixed

The report gives no description here.

MediumsetManagementFeeBps() fails to update fee stateFixed

The report gives no description here.

MediumWrong fee share calculations in _takeFee()Fixed

The report gives no description here.

LowAdd checks for zero returned sharesFixed

The report gives no description here.

Show 4 more
LowCurrentblockdeposits() may return an incorrect valueFixed

The report gives no description here.

Lowmaxwithdraw() ignores pending redemptionsFixed

The report gives no description here.

LowPreview functions fail with supply=0Fixed

The report gives no description here.

LowProtocol may charge more fees than expectedFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Blueberry’s security record

Blueberry
Audits4 audits by 2 firmsLast audit May 2025, by Pashov Audit Group.
Critical findingsNo open critical findingsAcross the 4 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open Blueberry’s security record

Security firm

Pashov Audit Group

30 projects reviewed · 53 reports · latest Jul 2026

See Pashov Audit Group’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us