Strata PreDeposit Vaults

QuantstampFiles named in the report

Quantstamp reviewed Strata (Strata PreDeposit Vaults) on 7 Jul 2025: 2 findings, 0 critical; 1 marked fixed, 1 open.

No open critical findings
Open the reportOpen Strata’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings2

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium000
Low101
LowMetaVault-Mechanic Could Be Used to Circumvent Paused State/Limits Enforced on Registered VaultsFixed

The MetaVault enables different registered ERC4626 vault shares to be used similarly to USDe, the underlying asset of the vault. In the different deposits and withdraw flows involving those registered share tokens, the registered vault's `previewX()` functions are used to determine the appropriate converted amount to be tracked in the vault/the amount to be paid out. According to the ERC-4626 standard, however, the `previewX()` functions are supposed to not account for any withdrawal/deposit limits or pauses to the vault contract, they solely calculate the shares or underlying assets based on the conversion function at hand, ignoring additional state such as contract pause or deposit limits. For this fairly rare case of not just pricing the asset, but also making it interchangeably used with other registered share tokens and USDe, we think that the state-including check via the `maxX()` functions should additionally be performed.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (5)

  • contracts/predeposit/MetaVault.sol
  • contracts/predeposit/PreDepositPhaser.sol
  • contracts/predeposit/PreDepositVault.sol
  • contracts/predeposit/pUSDeVault.sol
  • contracts/predeposit/pUSDeDepositor.sol

Part of Strata’s security record

Strata
Audits7 audits by 3 firmsLast audit Jan 2026, by Cyfrin.
Critical findingsNo open critical findingsAcross the 7 reports, 3 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Strata’s security record

Security firm

Quantstamp

236 projects reviewed · 332 reports · latest Oct 2026

See Quantstamp’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us