Cove security record
As of 21 Oct 2026, Cove has 2 audit reports by 1 security firm on Trustblock; the latest is by Pashov Audit Group, dated 19 Apr 2025. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits2
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Cove security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Cove security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
Findings26
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 2 |
| Medium | 0 | 0 | 5 |
| Low | 0 | 5 | 14 |
HighIncorrect basket USD value will cause incorrect resultsCove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportHighThe target weight check does not account for redeem request assetsCove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportMediumDeviation check upon validating external trades is unidirectionalCove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportMediumLoss of surplus if ERC-1271 order allows arbitrary dataCove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportMediumMissing ERC20Permit init call in initialize()Cove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportMediumorderValidTo assumes stepDelay is always 15 minutesCove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportMediumupdateBitFlag does not update the index of the base assetCove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportLowManagement fees not updated timely in setManagementFee()Cove security review · Pashov Audit Group · 19 Apr 2025Fixed
The report gives no description here.
Open the reportLowexecuteTokenSwap can be called with empty externalTradesCove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportLowExternal trades tradeOwnership is not validatedCove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowFully claiming fees requires a batch of 2 claimsCove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportLowHardcoded slippage is dangerousCove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportLowLack of restriction on BasketManager's executeCove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportLowMalicious users can decrease management fees accrualCove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportLowManagement fees might not accrueCove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportLowManagementFee calculation does not match the documentationCove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportLowNot transferring already collected claimableSponsorFeesCove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportLowPrecision loss in _processExternalTrades()Cove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportLowproRataRedeem() lacks a check to verify if msg.sender is the operatorCove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportLowThe rebalance requirement check is too sensitiveCove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportShow 1 more
Lowtrade.maxAmount check in the _processInternalTrades()Cove security review · Pashov Audit Group · 16 Jan 2025Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="cove-yfi"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us