Margined Protocol Locust Vault Framework audit
Oak Security reviewed Margined (Margined Protocol Locust Vault Framework audit) on 25 Nov 2024: 9 findings, 3 critical; all marked fixed.
Report hosted on GitHub.
Trustblock does not review code.
Findings9
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 3 |
| High | 0 | 0 | 4 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 0 | 2 |
CriticalIncorrect calculation of deposit value causes more shares to be mintedFixed
The report gives no description here.
CriticalUser redeemed amount can be manipulated to break future depositsFixed
The report gives no description here.
CriticalUsers might withdraw less liquidity when the strategy contract borrowed fundsFixed
The report gives no description here.
HighController can bypass the float threshold by specifying duplicatesFixed
The report gives no description here.
Highestimate_cycle_profit configuration field cannot be updatedFixed
The report gives no description here.
HighStrategy contract’s ownership cannot be transferredFixed
The report gives no description here.
HighUsers might receive zero shares due to small deposits, causing a loss of fundsFixed
The report gives no description here.
LowController address cannot be updatedFixed
The report gives no description here.
LowQuery messages do not account for token1 denomFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Margined’s security record
Security firm
Oak Security33 projects reviewed · 60 reports · latest May 2026
See Oak Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us