Symmio, Staking and Vesting audit

Sherlock10 Mar 2025Code version: not recorded (see the report)

Audit competition · firm’s term: public audit contest

Sherlock reviewed SYMMIO (Symmio, Staking and Vesting audit) on 10 Mar 2025: 6 findings, 0 critical; 5 marked fixed, 1 acknowledged.

No open critical findings

Open the report Open SYMMIO’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings6

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	1
Medium	0	1	4
Low	0	0	0

HighUSDC rewards will not be distributed if _updateRewardsStates is triggered too oftenFixed

The report gives no description here.

MediumBad check in Vesting.sol::_resetVesting Plans will prevent users from adding additional liquidity in SymmVesting.solFixed

The report gives no description here.

MediumIncorrect initializer modifier in Vesting contract prevents proper initializationFixed

The report gives no description here.

MediumMalicious User can dilute staking Rewards to a longer timeframeFixed

The report gives no description here.

MediumReadding the reward token causes user-RewardPerTokenPaid to be incorrect for some users, resulting in them receiving too many rewards.Fixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of SYMMIO’s security record

SYMMIO

Audits2 audits by 1 firmLast audit Mar 2025, by Sherlock.

Critical findingsNo open critical findingsAcross 2 reports.

Open SYMMIO’s security record

Security firm

Sherlock

46 projects reviewed · 67 reports · latest Sep 2026

See Sherlock’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.