Quantstamp reviewed Strata (Strata PreDeposit Vaults) on 7 Jul 2025: 2 findings, 0 critical; 1 marked fixed, 1 open.
Report hosted on certificate.quantstamp.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 1 | 0 | 1 |
The MetaVault enables different registered ERC4626 vault shares to be used similarly to USDe, the underlying asset of the vault. In the different deposits and withdraw flows involving those registered share tokens, the registered vault's `previewX()` functions are used to determine the appropriate converted amount to be tracked in the vault/the amount to be paid out. According to the ERC-4626 standard, however, the `previewX()` functions are supposed to not account for any withdrawal/deposit limits or pauses to the vault contract, they solely calculate the shares or underlying assets based on the conversion function at hand, ignoring additional state such as contract pause or deposit limits. For this fairly rare case of not just pricing the asset, but also making it interchangeably used with other registered share tokens and USDe, we think that the state-including check via the `maxX()` functions should additionally be performed.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (5)
236 projects reviewed · 332 reports · latest Oct 2026
See Quantstamp’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us