Derive security review

Sigma Prime1 Sep 2024Code version: not recorded (see the report)

Audit · firm’s term: security review

Sigma Prime reviewed Derive (Derive security review) on 1 Sep 2024: 16 findings, 4 critical; 11 marked fixed, 5 acknowledged.

4 critical findings, fixed

Open the report Open Derive’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings16

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	4
High	0	0	2
Medium	0	2	2
Low	0	3	3

MediumAllowances Can Be FrontranAcknowledged

The report gives no description here.

MediumPerpetual Asset Funding can be Manipulated by Applying at Peaks and TroughsAcknowledged

The report gives no description here.

LowAllowances Not Cleared On Account TransferAcknowledged

The report gives no description here.

LowAllowList Can Be BypassedAcknowledged

The report gives no description here.

LowForceWithdraw Can Be BlockedAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Derive’s security record

Derive

Audits6 audits by 2 firmsLast audit Mar 2025, by Sigma Prime.

Critical findings1 critical acknowledged, not fixedReported in “Derive security review” by Sigma Prime, Jan 2025. The team acknowledged it.

Open Derive’s security record

Security firm

Sigma Prime

16 projects reviewed · 37 reports · latest Aug 2026

See Sigma Prime’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.