Securitize Solana SPL ACL Audit Report

CyfrinCode version: not recorded (see the report)

Cyfrin reviewed Securitize (Securitize Solana SPL ACL Audit Report) on 17 Mar 2026: 3 findings, 0 critical; all marked fixed.

No open critical findings
Open the reportOpen Securitize’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings3

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium001
Low002

Marked Informational or Gas by the firm. Not counted as findings.

Informationalchange_admin is single-step and permits irreversible admin loss through bad inputAcknowledged

The report gives no description here.

InformationalIncorrect Documentation Comment for create_config_handlerFixed

The report gives no description here.

Informationalnew_freeze_authority Omitted from DeleteConfig EventFixed

The report gives no description here.

GasRedundant executable check for token ACL program after address validationFixed

The report gives no description here.

InformationalSeveral error variants are defined but currently unusedFixed

The report gives no description here.

Informationaltoken_account is missing a local mint == mint.key() constraint in authority flowsFixed

The report gives no description here.

InformationalUnnecessary mut constraint on mint in read-only ops delays genuine operations that require mint to be mutableFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Securitize’s security record

Securitize
Audits37 audits by 2 firmsLast audit Sep 2026, by Cyfrin.
Critical findingsNo open critical findingsAcross the 37 reports, 6 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Securitize’s security record

Security firm

Cyfrin

28 projects reviewed · 79 reports · latest Sep 2026

See Cyfrin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us