Securitize DSToken Timelocks Audit Report

Governance script gaps: the pre-handover checklist asserts stored values rather than installed behaviour or reachable authority

not_fixed/low

DSToken::setMintCap, setOverCapGracePeriod accept unbounded inputs, so a mistaken governance proposal causes an issuance outage lasting at least one timelock delay

acknowledged/low

TrustService::removeRole on an address with no role emits DSTrust- ServiceRoleAdded

acknowledged/low

verify-governance compares service slots without attesting the deployed implementation, so it reports no drift in a state where Compliance- ConfigurationService rule setters remain transfer-agent gate

acknowledged/low