Forta security record
As of 30 Oct 2026, Forta has 4 audit reports by 2 security firms on Trustblock; the latest is by OpenZeppelin, dated 8 Jan 2025. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits4
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Forta Firewall Incremental Audit | Security firm: OpenZeppelin | Date: | Scope: Files named in the report | No open critical findings | Open · blog.openzeppelin.com |
| Forta Staking Vault Audit | Security firm: OpenZeppelin | Date: | Scope: Files named in the report | 1 critical finding, fixed | Open · blog.openzeppelin.com |
| Forta Delegated Staking | Security firm: Consensys | Date: | Scope: Files named in the report | 1 critical finding, fixed | Open · diligence.security |
| Forta Protocol Audit | Security firm: OpenZeppelin | Date: | Scope: Files named in the report | No open critical findings | Open · blog.openzeppelin.com |
Findings54
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 0 | 5 |
| Medium | 3 | 1 | 11 |
| Low | 3 | 0 | 29 |
CriticalIncomplete Implementation of ERC-4626 Base Contract Leading to Asset Management and Usability IssuesForta Staking Vault Audit · OpenZeppelin · 23 Apr 2024Fixed
The report gives no description here.
Open the reportCriticaldidTransferShares function has no access control modifierForta Delegated Staking · Consensys · 1 Nov 2022Fixed
The report gives no description here.
Open the reportHighOverflow in quantize Function Can Cause a DoSForta Firewall Incremental Audit · OpenZeppelin · 8 Jan 2025Fixed
The report gives no description here.
Open the reportHighAttacker Can Stall UndelegationsForta Staking Vault Audit · OpenZeppelin · 23 Apr 2024Fixed
The report gives no description here.
Open the reportHighA single unfreeze dismisses all other slashing proposal freezesForta Delegated Staking · Consensys · 1 Nov 2022Fixed
The report gives no description here.
Open the reportHighIncorrect reward epoch start date calculationForta Delegated Staking · Consensys · 1 Nov 2022Fixed
The report gives no description here.
Open the reportHighMalicious user can register a scanner under any ownerForta Protocol Audit · OpenZeppelin · 8 Jun 2022Fixed
The report gives no description here.
Open the reportMediumApplying Comparison to Raw Signed Integers Causes Unexpected ResultsForta Firewall Incremental Audit · OpenZeppelin · 8 Jan 2025Fixed
The report gives no description here.
Open the reportMediumWrong and Incomplete DocstringsForta Staking Vault Audit · OpenZeppelin · 23 Apr 2024Fixed
The report gives no description here.
Open the reportMediumAgentRegistryCore - Agent Creation DoSForta Delegated Staking · Consensys · 1 Nov 2022Fixed
The report gives no description here.
Open the reportShow 10 more
MediumLack of checks for rewarding an epoch that has already been rewardedForta Delegated Staking · Consensys · 1 Nov 2022Fixed
The report gives no description here.
Open the reportMediumReentrancy in FortaStaking during ERC1155 mintsForta Delegated Staking · Consensys · 1 Nov 2022Fixed
The report gives no description here.
Open the reportMediumStorage gap variables slightly off from the intended sizeForta Delegated Staking · Consensys · 1 Nov 2022Fixed
The report gives no description here.
Open the reportMedium__gap missing in upgradeable contractsForta Protocol Audit · OpenZeppelin · 8 Jun 2022Fixed
The report gives no description here.
Open the reportMediumL2 tokens could get stuckForta Protocol Audit · OpenZeppelin · 8 Jun 2022Fixed
The report gives no description here.
Open the reportMediumSlashing process could be revertedForta Protocol Audit · OpenZeppelin · 8 Jun 2022Fixed
The report gives no description here.
Open the reportMediumStaked funds might get soft-stuckForta Protocol Audit · OpenZeppelin · 8 Jun 2022Fixed
The report gives no description here.
Open the reportMediumUnclear initialization of inherited contractsForta Protocol Audit · OpenZeppelin · 8 Jun 2022Fixed
The report gives no description here.
Open the reportLowInability to Modify Firewall Access After Contract DeploymentForta Firewall Incremental Audit · OpenZeppelin · 8 Jan 2025Fixed
The report gives no description here.
Open the reportLowIncomplete DocstringsForta Firewall Incremental Audit · OpenZeppelin · 8 Jan 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowLack of Input ValidationForta Firewall Incremental Audit · OpenZeppelin · 8 Jan 2025Fixed
The report gives no description here.
Open the reportLowMissing DocstringsForta Firewall Incremental Audit · OpenZeppelin · 8 Jan 2025Fixed
The report gives no description here.
Open the reportLowMissing Zero Address ChecksForta Firewall Incremental Audit · OpenZeppelin · 8 Jan 2025Fixed
The report gives no description here.
Open the reportLowDuplicate Utilization of FortaStakingUtils LibraryForta Staking Vault Audit · OpenZeppelin · 23 Apr 2024Fixed
The report gives no description here.
Open the reportLowInadequate Visibility of State Variables in RedemptionReceiver ContractForta Staking Vault Audit · OpenZeppelin · 23 Apr 2024Fixed
The report gives no description here.
Open the reportLowInsufficient Project Information in README.mdForta Staking Vault Audit · OpenZeppelin · 23 Apr 2024Fixed
The report gives no description here.
Open the reportLowLack of Input ValidationForta Staking Vault Audit · OpenZeppelin · 23 Apr 2024Fixed
The report gives no description here.
Open the reportLowMissing Return Values in Functions Impair Protocol Integration and Information FlowForta Staking Vault Audit · OpenZeppelin · 23 Apr 2024Fixed
The report gives no description here.
Open the reportLowNot Checking if There Are Assets in the Vault to RedeemForta Staking Vault Audit · OpenZeppelin · 23 Apr 2024Fixed
The report gives no description here.
Open the reportLowRedundant State VariableForta Staking Vault Audit · OpenZeppelin · 23 Apr 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowTokens Trapped in the Vault Might Cause Redemptions to Revert in Low FORT Liquidity ScenariosForta Staking Vault Audit · OpenZeppelin · 23 Apr 2024Fixed
The report gives no description here.
Open the reportLowComment and code inconsistenciesForta Delegated Staking · Consensys · 1 Nov 2022Fixed
The report gives no description here.
Open the reportLowEvent spam in RewardsDistributor.claimRewardsForta Delegated Staking · Consensys · 1 Nov 2022Fixed
The report gives no description here.
Open the reportLowLack of a check for the subject’s stake for reviewSlashProposalParametersForta Delegated Staking · Consensys · 1 Nov 2022Fixed
The report gives no description here.
Open the reportLowSubjectTypes.sol files unusedForta Delegated Staking · Consensys · 1 Nov 2022Fixed
The report gives no description here.
Open the reportLowUnnecessary code blocks that check the same conditionForta Delegated Staking · Consensys · 1 Nov 2022Fixed
The report gives no description here.
Open the reportLowAdd information in _emitHook callsForta Protocol Audit · OpenZeppelin · 8 Jun 2022Fixed
The report gives no description here.
Open the reportLowDeviation from specificationsForta Protocol Audit · OpenZeppelin · 8 Jun 2022Fixed
The report gives no description here.
Open the reportLowImplement a remove-whitelist functionalityForta Protocol Audit · OpenZeppelin · 8 Jun 2022Fixed
The report gives no description here.
Open the reportLowImplicit castingForta Protocol Audit · OpenZeppelin · 8 Jun 2022Fixed
The report gives no description here.
Open the reportShow 7 more
LowIncomplete interfacesForta Protocol Audit · OpenZeppelin · 8 Jun 2022Fixed
The report gives no description here.
Open the reportLowInconsistent slot size for upgradesForta Protocol Audit · OpenZeppelin · 8 Jun 2022Fixed
The report gives no description here.
Open the reportLowMagic numbers are usedForta Protocol Audit · OpenZeppelin · 8 Jun 2022Fixed
The report gives no description here.
Open the reportLowPotential for hash collisions with frontrun protectionForta Protocol Audit · OpenZeppelin · 8 Jun 2022Fixed
The report gives no description here.
Open the reportLowReentrancy possibility due to _doSafeTransferAcceptanceCheckForta Protocol Audit · OpenZeppelin · 8 Jun 2022Fixed
The report gives no description here.
Open the reportLowSemantic overloadForta Protocol Audit · OpenZeppelin · 8 Jun 2022Fixed
The report gives no description here.
Open the reportLowTODOs and comments implying unfinished codeForta Protocol Audit · OpenZeppelin · 8 Jun 2022Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="forta"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us