Securitize EVM Async Vault Audit Report

Cyfrin20 Aug 2026Code version: not recorded (see the report)

Cyfrin reviewed Securitize (Securitize EVM Async Vault Audit Report) on 20 Aug 2026: 13 findings, 0 critical; 10 marked fixed, 2 acknowledged, 1 open.

No open critical findings

Open the report Open Securitize’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings13

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	1	0	0
Medium	0	0	1
Low	0	2	9

MediumDouble rounding in partial redemption allows reserve extraction without equivalent DS Token burnFixed

The report gives no description here.

LowAsyncFundVault::deposit strands zero-share fulfilled depositsFixed

The report gives no description here.

LowAsyncFundVault::fulfillRedemptions burns zero-value redemptionsFixed

The report gives no description here.

LowAsyncFundVault::requestDeposit permits dust griefing of controller capacityFixed

The report gives no description here.

LowAsyncFundVault::requestDeposit rejects documented NonWithdrawable submissionsFixed

The report gives no description here.

LowAsyncFundVault::totalAssets reports a mutable liquidity reserve rather than total managed assetsFixed

The report gives no description here.

LowAsyncFundVault::withdraw rejects zero-fill redemption claimsFixed

The report gives no description here.

LowCancellation functions do not support an alternative recipientFixed

The report gives no description here.

LowERC 7540 and ERC 7575 conformance gaps break standard discovery and claim availability viewsFixed

The report gives no description here.

LowZero live NAV bypasses settlement price validationFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Securitize’s security record

Securitize

Audits37 audits by 2 firmsLast audit Sep 2026, by Cyfrin.

Critical findingsNo open critical findingsAcross the 37 reports, 6 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Securitize’s security record

Security firm

Cyfrin

28 projects reviewed · 79 reports · latest Sep 2026

See Cyfrin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.