Securitize DSToken Timelocks Audit Report
Cyfrin reviewed Securitize (Securitize DSToken Timelocks Audit Report) on 7 Sep 2026: 3 findings, 0 critical; all marked fixed.
Report hosted on GitHub.
Trustblock does not review code.
Findings3
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 0 | 3 |
Marked Informational by the firm. Not counted as findings.
InformationalGovernance script gaps: the pre-handover checklist asserts stored values rather than installed behaviour or reachable authorityOpen
The report gives no description here.
InformationalDSToken::setMintCap, setOverCapGracePeriod accept unbounded inputs, so a mistaken governance proposal causes an issuance outage lasting at least one timelock delayAcknowledged
The report gives no description here.
InformationalTrustService::removeRole on an address with no role emits DSTrust- ServiceRoleAddedAcknowledged
The report gives no description here.
Informationalverify-governance compares service slots without attesting the deployed implementation, so it reports no drift in a state where Compliance- ConfigurationService rule setters remain transfer-agent gateAcknowledged
The report gives no description here.
InformationalA single TimelockController::scheduleBatch containing updateDelay set to zero converts a delayed controller into an instant one for the cost of one delayFixed
The report gives no description here.
InformationalBulkOperator holds ROLE_ISSUER but is registered under no service id, so handover and verification cannot see it and its owner retains instant upgrade authorityFixed
The report gives no description here.
InformationalDSToken::scheduleOverCapIssuance includes block.timestamp in the operation id, so one salt can schedule the same mint repeatedly in different blocksFixed
The report gives no description here.
InformationalGate DSToken::executeOverCapMint on the token pause to give the transfer agent an instant block on scheduled exceptional mintsFixed
The report gives no description here.
InformationalIDSServiceConsumer::DEPRECATED_ISSUER_MULTICALL, DEPRE- CATED_TA_MULTICALL are both zero while the deployment utilities define them as 8194 and 8195, leaving two incompatible service-id registriesFixed
The report gives no description here.
InformationalMinting-control documentation is stale on window reset and silent on exceptional-mint operations and the tumbling-window boundaryFixed
The report gives no description here.
Show 2 more
Informationalsetup-governance handover omits deprecated service ids so pre-handover key retains OwnableUpgradeable::owner upgrade authority over live ROLE_ISSUER and ROLE_TRANSFER_AGENT proxies and can burn, seizeFixed
The report gives no description here.
Informationalsetup-governance surrenders ROLE_MASTER before confirming every ownership transfer succeeded, so a silently skipped owner mismatch leaves a live ROLE_ISSUER proxy outside the timelock and is detectedFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Securitize’s security record
SecuritizeSecurity firm
Cyfrin28 projects reviewed · 79 reports · latest Sep 2026
See Cyfrin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us