Idle Finance Credit Vaults audit

SherlockCode version: not recorded (see the report)

Audit competition · firm’s term: private audit contest

Sherlock reviewed Idle Finance (Idle Finance Credit Vaults audit) on 21 Dec 2024: 5 findings, 0 critical; 4 marked fixed, 1 acknowledged.

No open critical findings
Open the reportOpen Idle Finance’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings5

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High002
Medium012
Low000
HighA single depositor can grief other depositors on the liquidity deposited for the first epochFixed

The report gives no description here.

HighDepositing to IdleCDO is vulnerable to inflation attacksFixed

The report gives no description here.

MediumInterest will be lost if funds are withdrawn from a tranche in which the APRRatio != FULL_ALLOCFixed

The report gives no description here.

MediumUsers may not withdraw their funds because of the grief attackFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Idle Finance’s security record

Idle Finance
Audits4 audits by 3 firmsLast audit Dec 2024, by Sherlock.
Critical findingsNo open critical findingsAcross 4 reports.
Open Idle Finance’s security record

Security firm

Sherlock

46 projects reviewed · 67 reports · latest Sep 2026

See Sherlock’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us