Solidly Audit Report

Cyfrin24 Jan 2024Code version: not recorded (see the report)

Cyfrin reviewed Solidly (Solidly Audit Report) on 24 Jan 2024: 7 findings, 0 critical; 5 marked fixed, 2 acknowledged.

No open critical findings

Open the report Open Solidly’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	3
Low	0	2	2

MediumAttacker can abuse RewardsDistributor::triggerRoot to block reward claims and unpause a paused stateFixed

The report gives no description here.

MediumAttacker can corrupt RewardsDistributor internal accounting forcing LP token incentive deposits to revert for tokens like cUSDCv3Fixed

The report gives no description here.

MediumRewardsDistributor doesn’t correctly handle deposits of fee-on-transfer incentive tokensFixed

The report gives no description here.

LowChange v3-rewards/package.json to require minimum OpenZeppelin v4.9.2 as prior versions had a security vulnerability in Merkle Multi ProofFixed

The report gives no description here.

LowUse low level call() to prevent gas griefing attacks when returned data not requiredFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Solidly’s security record

Solidly

Audits1 audit by 1 firmLast audit Jan 2024, by Cyfrin.

Critical findingsNo open critical findingsIn 1 report.

Open Solidly’s security record

Security firm

Cyfrin

28 projects reviewed · 79 reports · latest Sep 2026

See Cyfrin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.