Covenant security review
Audit · firm’s term: security review
Pashov Audit Group reviewed Covenant (Covenant security review) on 31 Aug 2025: 25 findings, 0 critical; 22 marked fixed, 3 acknowledged.
No open critical findings
Open the reportOpen Covenant’s security record
Report hosted on GitHub.
Trustblock does not review code.
Findings25
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 5 |
| Low | 0 | 3 | 16 |
LowMarket pause does not stop interest and fee accrualAcknowledged
The report gives no description here.
LowMissing validation for identical base and quote Tokens in marketAcknowledged
The report gives no description here.
LowThe last withdrawer can be sandwiched to extract fees from the redeem operationAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Covenant’s security record
Covenant
Audits2 audits by 2 firmsLast audit Aug 2025, by Pashov Audit Group.
Critical findingsNo open critical findingsAcross 2 reports.
Open Covenant’s security recordSecurity firm
Pashov Audit Group86 projects reviewed · 165 reports · latest Aug 2026
See Pashov Audit Group’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us