Circle security record

Arbitrum, Avalanche, Base, Ethereum, Optimism, Polygon (POS), Polygon zkEVM, Scroll, Solana, Sui, zkSynccircle.comX

As of 8 Nov 2026, Circle has 7 audit reports by 2 security firms on Trustblock; the latest is by ChainSecurity, dated 9 Feb 2026. Those reports list no open critical findings.

Critical findings
No open critical findings
Across the 7 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it. See the findings
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.

Audits7

Newest first

1 other security report listed, not counted

ReportSecurity firmDateScopeCritical findingsSource
Circle xReserve Smart ContractsSecurity firm: ChainSecurityDate: Scope: Files listedNone openchainsecurity.com ↗
Circle Gateway Smart ContractsSecurity firm: ChainSecurityDate: Scope: Files listedNone openchainsecurity.com ↗
CCTP V2 Smart Contracts (inclusive of the StandardSecurity firm: ChainSecurityDate: Scope: Not recorded; see the reportNone openchainsecurity.com ↗
CCTP V2 Smart ContractsSecurity firm: ChainSecurityDate: Scope: Files listedNone openchainsecurity.com ↗
Circle PerimeterSecurity firm: ChainSecurityDate: Scope: Not recorded; see the report1 critical finding, fixedchainsecurity.com ↗
Cross Chain Transfer Protocol (CCTP)Security firm: ChainSecurityDate: Scope: Not recorded; see the reportNone openchainsecurity.com ↗
Aida Circle - Audit 1Security firm: CertiKDate: Scope: Files listedNone openskynet.certik.com ↗
Aida Circle - Pentest

Penetration test of off-chain systemsNot counted as an audit report

Security firm: CertiKDate: Scope: Not recorded; see the reportNone openskynet.certik.com ↗

Findings68

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical001
High005
Medium107
Low2532

Marked Informational by the firms. Not counted as findings.

InformationalDuplicated CodeCircle xReserve Smart Contracts · ChainSecurity · 9 Feb 2026Fixed

The report gives no description here.

Open the report
InformationalEvent IndexingCircle xReserve Smart Contracts · ChainSecurity · 9 Feb 2026Fixed

The report gives no description here.

Open the report
InformationalMissing Zero Address CheckCircle xReserve Smart Contracts · ChainSecurity · 9 Feb 2026Fixed

The report gives no description here.

Open the report
InformationalUnused FunctionCircle xReserve Smart Contracts · ChainSecurity · 9 Feb 2026Fixed

The report gives no description here.

Open the report
InformationalEIP-1155 Compliant View Functions in Balances Might RevertCircle Gateway Smart Contracts · ChainSecurity · 8 Jul 2025Fixed

The report gives no description here.

Open the report
InformationalMisleading Field Name NonceCircle Gateway Smart Contracts · ChainSecurity · 8 Jul 2025Fixed

The report gives no description here.

Open the report
InformationalMissing Blacklist CheckCircle Gateway Smart Contracts · ChainSecurity · 8 Jul 2025Fixed

The report gives no description here.

Open the report
InformationalMissing Sanity ChecksCircle Gateway Smart Contracts · ChainSecurity · 8 Jul 2025Fixed

The report gives no description here.

Open the report
InformationalUnused FunctionsCircle Gateway Smart Contracts · ChainSecurity · 8 Jul 2025Fixed

The report gives no description here.

Open the report
InformationalUnused Import in BalancesCircle Gateway Smart Contracts · ChainSecurity · 8 Jul 2025Fixed

The report gives no description here.

Open the report
Show 5 more
InformationalValidation of TypedMemView ReferencesCircle Gateway Smart Contracts · ChainSecurity · 8 Jul 2025Fixed

The report gives no description here.

Open the report
InformationalRedundant CastingCCTP V2 Smart Contracts (inclusive of the Standard · ChainSecurity · 8 Apr 2025Fixed

The report gives no description here.

Open the report
InformationalUse Constant Instead of 1 or 0CCTP V2 Smart Contracts (inclusive of the Standard · ChainSecurity · 8 Apr 2025Fixed

The report gives no description here.

Open the report
InformationalRedundant CastingCCTP V2 Smart Contracts · ChainSecurity · 24 Mar 2025Fixed

The report gives no description here.

Open the report
InformationalUse Constant Instead of 1 or 0CCTP V2 Smart Contracts · ChainSecurity · 24 Mar 2025Fixed

The report gives no description here.

Open the report

Contracts

No deployed address is recorded for these audits.

The reports name a repository or files. Open a report to see its scope.

The repositories and files the reports name

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
	<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
	<div
		data-tb-project-widget
		data-tb-project-slug="circle"
	></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us