NOYA / Vault

HackenFiles named in the report

Audit

Hacken reviewed NOYA (NOYA / Vault) on 19 Apr 2024: 46 findings, 0 critical; 36 marked fixed, 10 open.

No open critical findings
Open the reportOpen NOYA’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings46

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High002
Medium5010
Low5024
MediumMissing access control in checkIfTVLHasDroped allows malicious users to burn feesOpen

The report gives no description here.

MediumMissing slippage allows front-run in token swapsOpen

The report gives no description here.

MediumToo restrictive condition may lead to loss of performance feesOpen

The report gives no description here.

MediumUnfinished Watchers contract allows to bypass the verification processOpen

The report gives no description here.

MediumUsers can receive less tokens than entitled during withdrawOpen

The report gives no description here.

LowChecks-Effects-Interactions Pattern ViolationOpen

The report gives no description here.

LowMissing and incorrect NatSpecOpen

The report gives no description here.

LowMissing onERC721Received callback creates risksOpen

The report gives no description here.

LowPerformance fees only works on increasing vault valuationOpen

The report gives no description here.

LowUpdate holding position can be bypassed during bridge operationOpen

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (48)

  • contracts/interface/ITokenTransferCallBack.sol
  • contracts/interface/SwapHandler/ISwapAndBridgeHandler.sol
  • contracts/connectors/DolomiteConnector.sol
  • contracts/helpers/valueOracle/oracles/NoyaUniswapPriceOracle.sol
  • contracts/interface/valueOracle/INoyaValueOracle.sol
  • contracts/interface/Accounting/IAccountingManager.sol
  • contracts/accountingManager/registry.sol
  • contracts/connectors/MaverickConnector.sol
  • contracts/helpers/valueOracle/oracles/ChainlinkOracleConnector.sol
  • contracts/connectors/PendleConnector.sol
  • contracts/accountingManager/NoyaFeeReceiver.sol
  • contracts/accountingManager/AccountingManager.sol
  • contracts/governance/Keepers.sol
  • contracts/connectors/CompoundConnector.sol
  • contracts/interface/SwapHandler/ILiFi.sol
  • contracts/connectors/UNIv3Connector.sol
  • contracts/interface/SwapHandler/ISwapAndBridgeImplementation.sol
  • contracts/connectors/BalancerConnector.sol
  • contracts/helpers/valueOracle/NoyaValueOracle.sol
  • contracts/governance/Watchers.sol
  • contracts/governance/TimeLock.sol
  • contracts/connectors/PancakeswapConnector.sol
  • contracts/interface/IConnector.sol
  • contracts/connectors/StargateConnector.sol
  • contracts/interface/valueOracle/AggregatorV3Interface.sol
  • contracts/connectors/CamelotConnector.sol
  • contracts/connectors/MorphoBlueConnector.sol
  • contracts/interface/IPositionRegistry.sol
  • contracts/helpers/proxy/NoyaProxy.sol
  • contracts/helpers/LZHelpers/LZHelperReceiver.sol
  • contracts/connectors/LidoConnector.sol
  • contracts/helpers/SwapHandler/Implementaions/LifiImplementation.sol
  • contracts/helpers/SwapHandler/GenericSwapAndBridgeHandler.sol
  • contracts/connectors/SiloConnector.sol
  • contracts/connectors/AaveConnector.sol
  • contracts/helpers/OmniChainHandler/OmnichainManagerNormalChain.sol
  • contracts/connectors/FraxConnector.sol
  • contracts/connectors/CurveConnector.sol
  • contracts/connectors/PrismaConnector.sol
  • contracts/governance/NoyaGovernanceBase.sol
  • contracts/helpers/TVLHelper.sol
  • contracts/connectors/AerodromeConnector.sol
  • contracts/connectors/BalancerFlashLoan.sol
  • contracts/accountingManager/BalancerFlashLoan.sol
  • contracts/helpers/OmniChainHandler/OmnichainLogic.sol
  • contracts/helpers/BaseConnector.sol
  • contracts/helpers/LZHelpers/LZHelperSender.sol
  • contracts/helpers/OmniChainHandler/OmnichainManagerBaseChain.sol

Part of NOYA’s security record

NOYA
Audits1 audit by 1 firmLast audit Apr 2024, by Hacken.
Critical findingsNo open critical findingsIn 1 report.
Open NOYA’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us