DEIN Finance security record
As of 30 Oct 2026, DEIN Finance has 1 audit report on Trustblock, by Resonance Security, dated 16 Apr 2025. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| DEIN Finance | Security firm: Resonance Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · IPFS |
Findings12
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 2 | 0 | 0 |
| Low | 2 | 0 | 8 |
Lowepoch in buyPolicy() Does Not Follow DocumentationDEIN Finance · Resonance Security · 16 Apr 2025Fixed
The documentation and the frontend show that the insurance duration should be between 1 and 15 epoch but it is possible to call buyPolicy with a higher value.
Open the reportLowevidenceURI Could Contain Malicious PayloadsDEIN Finance · Resonance Security · 16 Apr 2025Fixed
The evidenceURI added during claims is not sanitized and could allow room for json injection attacks or bad chars that could affect the web2 infrastructure.
Open the reportLowExecution at Deadlines Should Be AllowedDEIN Finance · Resonance Security · 16 Apr 2025Fixed
validToTime in the _isDiscountModelActive() function specifies whether a discount is applied until the specified date, but it may also be applicable in the scenario where block.timestamp is equal to validToTime.
Open the reportLowHardcoded blocks_per_day May Fail in L2 Chains or Consensus UpgradesDEIN Finance · Resonance Security · 16 Apr 2025Fixed
Hardcoding blocks_per_day in a smart contract can lead to several issues, mainly because the actual block time on Ethereum can fluctuate. This may lead to inaccurate time calculations, incorrect rewards and interest or incompatibility across L2 chains.
Open the reportLowMissing Limits In setMinimumInsuranceCost()DEIN Finance · Resonance Security · 16 Apr 2025Fixed
The setMinimumInsuranceCost() function does not limit the insurance cost. This may affect the user experience and it may not be practical.
Open the reportLowNon-external Function Names Should Begin With an UnderscoreDEIN Finance · Resonance Security · 16 Apr 2025Fixed
According to the Solidity Style Guide, non-external function names should begin with an underscore.
Open the reportLowTWAP Oracle Update Mechanism Cannot Be Left To UsersDEIN Finance · Resonance Security · 16 Apr 2025Fixed
The UniswapV2OracleLibrary is used to calculate prices based on the Uniswap V2 cumulative price, so contracts must manually call functions that capture the priceCumulativeLast.Discontinuous reporting may break the concept of TWAP and lead to unequal weightings to certain data points or price mismatch in case prices fluctuate rapidly.In case of low activity, the protocol updates the prices automatically every 3 days, but this time may not be enough.
Open the reportLowuint Should Not Be Initialized With 0DEIN Finance · Resonance Security · 16 Apr 2025Fixed
Initializing variables to their default values spends gas unnecessarily.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="dein-finance"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us