Securitize Tempo TIP-20 Audit Report
Cyfrin reviewed Securitize (Securitize Tempo TIP-20 Audit Report) on 28 Aug 2026: 9 findings, 0 critical; 8 marked fixed, 1 open.
Report hosted on GitHub.
Trustblock does not review code.
Findings9
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 1 | 0 | 7 |
Marked Informational by the firm. Not counted as findings.
Informationaldeploy-full.ts blindly retries one-shot deployment operationsAcknowledged
The report gives no description here.
InformationalTip20TrustService::_project can revoke unmanaged native grantsAcknowledged
The report gives no description here.
Informationaldeploy-full.ts can never execute mint stepFixed
The report gives no description here.
Informationaldeploy-full.ts does not verify the target Tempo networkFixed
The report gives no description here.
Informationaldeploy-full.ts permits overlapping operational role addressesFixed
The report gives no description here.
Informationaldeploy-full.ts suppresses investor onboarding failuresFixed
The report gives no description here.
InformationalITip20TrustService misdocuments MASTER native permissionsFixed
The report gives no description here.
InformationalTip20RegistryService events do not expose effective wallet authorizationFixed
The report gives no description here.
InformationalTip20RegistryService storage-gap comment has the wrong slot countFixed
The report gives no description here.
InformationalTip20RegistryService::addPlatformWallet has an unreachable duplicate checkFixed
The report gives no description here.
Show 6 more
InformationalTip20RegistryService::initialize does not reject a zero adminFixed
The report gives no description here.
InformationalTip20RegistryService::isAuthorized documentation does not match policy stateFixed
The report gives no description here.
InformationalTip20RegistryService::registerInvestorWithWallets can retain stale proof metadataFixed
The report gives no description here.
InformationalTip20RegistryService::registerInvestorWithWallets, isAuthorized mishandle Tempo virtual addressesFixed
The report gives no description here.
InformationalTip20RegistryService::setServiceConsumer missing eventFixed
The report gives no description here.
InformationalTip20TrustService::_setRole emits abstract-role events after native callsFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Securitize’s security record
SecuritizeSecurity firm
Cyfrin28 projects reviewed · 79 reports · latest Sep 2026
See Cyfrin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us