Quantstamp reviewed Strata (Strata Tranches) on 28 Oct 2025: 4 findings, 0 critical; 3 marked fixed, 1 open.
Report hosted on certificate.quantstamp.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 1 | 0 | 2 |
When depositing or withdrawaing from either the junior or senior vaults, the `shortfallPauser()` function is called. This function pauses deposits into both tranches in case that the share price in the JRT vault falls below a specified value. This can occur when debt obligations of the junior tranche as paid into the senior tranche in scenarios where the senior tranches promised yield could not be met. As part of a deposit, first, the accounting and debt is settled via `updateAccounting()`, followed by the actual deposit flow and then the mentioned shortfall-pause-mechanic. Notably, a triggered shortfall does not revert the transaction, but simply disables future deposits and emits an event. This ordering however means that a potential final large deposit, solidifying a shortfall, into the JRT could possibly mint shares far below the configured `jrtShortfallPausePrice`, which is intended to be the minimum price of the tranche. Such a depositor could possibly mint junior tranche tokens at a significant discount and see the value increase back to normal as future yield is generated by the protocol.
The report names a repository or files. Open the report to see its scope.
236 projects reviewed · 332 reports · latest Oct 2026
See Quantstamp’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us