Securitize Tempo TIP-20 Audit Report

CyfrinCode version: not recorded (see the report)

Cyfrin reviewed Securitize (Securitize Tempo TIP-20 Audit Report) on 28 Aug 2026: 9 findings, 0 critical; 8 marked fixed, 1 open.

No open critical findings
Open the reportOpen Securitize’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium001
Low107
MediumTip20RegistryService::removeWallet lets registrars bypass active investor locksFixed

The report gives no description here.

Lowdeploy-full.ts predicts the TIP-403 policy ID instead of reading the receiptFixed

The report gives no description here.

Lowdeploy-full.ts uses the wrong TIP-20 renounceRole signatureFixed

The report gives no description here.

LowTip20RegistryService::policyId can drift from the token transfer policyFixed

The report gives no description here.

LowTip20RegistryService::registerInvestorWithWallets exceeds Tempo’s transaction gas capFixed

The report gives no description here.

LowTip20RegistryService::setPolicyId accepts built-in TIP-403 policiesFixed

The report gives no description here.

LowTip20TrustService::setServiceOwner can assign MASTER to an inert addressFixed

The report gives no description here.

LowTip20TrustService::setServiceOwner uses one-step ownership transferFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Securitize’s security record

Securitize
Audits37 audits by 2 firmsLast audit Sep 2026, by Cyfrin.
Critical findingsNo open critical findingsAcross the 37 reports, 6 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Securitize’s security record

Security firm

Cyfrin

28 projects reviewed · 79 reports · latest Sep 2026

See Cyfrin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us