Solana On/Off Ramp Audit Report

CyfrinCode version: not recorded (see the report)

Cyfrin reviewed Securitize (Solana On/Off Ramp Audit Report) on 19 Feb 2026: 11 findings, 1 critical; 8 marked fixed, 3 acknowledged.

1 critical finding, fixed
Open the reportOpen Securitize’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings11

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High000
Medium001
Low036
CriticalInvestors can mint DsTokens out of thin airFixed

The report gives no description here.

MediumUnvalidated Payer in DS Token Issue CPI Allows Protocol or Registrar to Pay Creation FeesFixed

The report gives no description here.

LowAllowance Liquidity Provider Uses delegated_amount Without Capping by Actual BalanceFixed

The report gives no description here.

LowDS Token Subscription Can Proceed Without Wallet Identity Verification When Registration Accounts Are OmittedFixed

The report gives no description here.

LowInadequate validations on collector-token-account.Fixed

The report gives no description here.

LowIncomplete Rate CPI Context and Understated Minimum NAV Provider AccountsFixed

The report gives no description here.

LowInitialization Allows Omitted asset_vault Although Swaps Require ItFixed

The report gives no description here.

LowMissing Executable Check for NAV Provider in update_nav_providerFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Securitize’s security record

Securitize
Audits37 audits by 2 firmsLast audit Sep 2026, by Cyfrin.
Critical findingsNo open critical findingsAcross the 37 reports, 6 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Securitize’s security record

Security firm

Cyfrin

28 projects reviewed · 79 reports · latest Sep 2026

See Cyfrin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us