Crestal Network security record
As of 10 Nov 2026, Crestal Network has 1 audit report on Trustblock, by Sherlock, dated 14 Mar 2025. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Audits0· Audit competitions 1
Newest first
| Report | Security firm | Date | Scope | Critical findings | Source |
|---|---|---|---|---|---|
| Crestal Network auditAudit competition | Security firm: Sherlock | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
Findings7
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 6 |
| Low | 0 | 0 | 0 |
HighAnyone who is approving BlueprintV5 contract to spend ERC20 can get drained because Payment::payWithERC20Crestal Network audit · Sherlock · 14 Mar 2025Fixed
The report gives no description here.
Open the reportMediumcreateCommonProjectIDAndDeployment Request() hardcodes request id index to 0, leading to lost requests for usersCrestal Network audit · Sherlock · 14 Mar 2025Fixed
The report gives no description here.
Open the reportMediumLack of access control in setWorker PublicKey() in BlueprintCore.sol which results users to lose fundsCrestal Network audit · Sherlock · 14 Mar 2025Fixed
The report gives no description here.
Open the reportMediumNon whitelisted user can also create agent by calling createAgentWithNFT instead of createAgentWithWhitelistUsers affecting the motive of protocol to only allow whitelisted user to create agentCrestal Network audit · Sherlock · 14 Mar 2025Fixed
The report gives no description here.
Open the reportMediumSignature Replay attack possible on updateWorkerDeploymentConfigWithSig() in Blueprintcore.sol which leads to users lose the fundsCrestal Network audit · Sherlock · 14 Mar 2025Fixed
The report gives no description here.
Open the reportMediumSignatures missing some parameters being vulnerable to attackers using them coupled with malicious parametersCrestal Network audit · Sherlock · 14 Mar 2025Fixed
The report gives no description here.
Open the reportMediumWorker-Induced Denial-of-Service in Deployment Requests Due to Lack of a Cancellation MechanismCrestal Network audit · Sherlock · 14 Mar 2025Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="crestal-network"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us