Elixir security review

Pashov Audit GroupCode version: not recorded (see the report)

Audit · firm’s term: security review

Pashov Audit Group reviewed Elixir Protocol (Elixir security review) on 22 Aug 2025: 13 findings, 0 critical; 10 marked fixed, 3 acknowledged.

No open critical findings
Open the reportOpen Elixir Protocol’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings13

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium002
Low037
HighIncorrect timestamp comparison leads to cooldown bypassFixed

The report gives no description here.

MediumInconsistencies in Blacklisting logicFixed

The report gives no description here.

MediumOrphaned rewards captured by first stakerFixed

The report gives no description here.

LowFaulty logic allows duplicate custodian additionFixed

The report gives no description here.

LowGhost members in ACL causing potential storage bloatFixed

The report gives no description here.

LowIncomplete storage cleanup on full withdrawalFixed

The report gives no description here.

LowMissing role bounds check in has_roleFixed

The report gives no description here.

LowMissing the function to transfer the AdminCap objectFixed

The report gives no description here.

LowThe deposit function lacks asset support checkFixed

The report gives no description here.

LowUnavailable view functionFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Elixir Protocol’s security record

Elixir Protocol
Audits1 audit by 1 firmLast audit Aug 2025, by Pashov Audit Group.
Critical findingsNo open critical findingsIn 1 report.
Open Elixir Protocol’s security record

Security firm

Pashov Audit Group

30 projects reviewed · 53 reports · latest Jul 2026

See Pashov Audit Group’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us