Securitize DSToken Rebasing Audit Report
Cyfrin reviewed Securitize (Securitize DSToken Rebasing Audit Report) on 10 Oct 2025: 33 findings, 1 critical; 23 marked fixed, 10 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings33
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 0 |
| Medium | 0 | 4 | 5 |
| Low | 0 | 6 | 17 |
MediumComplianceServiceRegulated applies double locking to investor transferable tokens leading to DoS of transfersAcknowledged
The report gives no description here.
MediumeuRetailInvestorsCount is susceptible to underflow when transferring tokens between retail and qualified investors of the same country on the EU regionAcknowledged
The report gives no description here.
MediumHistorical token issuances become subject to new lock-up requirements when users change residencyAcknowledged
The report gives no description here.
MediumToken value locks done as part of issuance restrict subsequently transferred unlocked tokens after negative rebasingAcknowledged
The report gives no description here.
LowAttribute changes via setAttribute or updateInvestor do NOT trigger compliance count updates.Acknowledged
The report gives no description here.
LowNo way for users to invalidate nonce used to signAcknowledged
The report gives no description here.
LowNot maximum amount of issuances enforceAcknowledged
The report gives no description here.
LowProtocol will leak value to users due to rounding in RebasingLibraryAcknowledged
The report gives no description here.
LowSeized tokens will be stuck on the receiver of the seized funds because it is not an investor and never receives investorsBalanceAcknowledged
The report gives no description here.
LowStale Issuance Records After Burn and Seize OperationsAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Securitize’s security record
SecuritizeSecurity firm
Cyfrin28 projects reviewed · 79 reports · latest Sep 2026
See Cyfrin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us