Harvest security record

Arbitrum, Base, BNB Chain, Ethereum, Polygon (POS)harvest.financeXGitHub

As of 3 Nov 2026, Harvest has 1 audit report on Trustblock, by PeckShield, dated 1 Oct 2020. That report lists no open critical findings. It also holds 1 incident (latest 26 Oct 2020).

Critical findings
No open critical findings
In 1 report.
Incident
Incident 26 Oct 2020
Source: De.Fi incident database. No audit on Trustblock is dated after it. See the incident
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.

Audits1

Newest first

AuditSecurity firmDateScopeCritical findingsReport
Harvest auditSecurity firm: PeckShieldDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub

Findings6

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical000
High100
Medium011
Low012

Marked Informational by the firms. Not counted as findings.

InformationalAuthenticated salvage() From onlyGovernanceHarvest audit · PeckShield · 1 Oct 2020Acknowledged

The report gives no description here.

Open the report
InformationalGas Optimization in withdrawToVault()Harvest audit · PeckShield · 1 Oct 2020Acknowledged

The report gives no description here.

Open the report
InformationalImproved Asset Consistency Between Vaults and StrategiesHarvest audit · PeckShield · 1 Oct 2020Acknowledged

The report gives no description here.

Open the report
InformationalOptimized claimAndLiquidateCrv() For Improved InvestmentHarvest audit · PeckShield · 1 Oct 2020Acknowledged

The report gives no description here.

Open the report
InformationalPossible Revert in withdrawToVault()Harvest audit · PeckShield · 1 Oct 2020Acknowledged

The report gives no description here.

Open the report
InformationalSimplified Logic in getReward()Harvest audit · PeckShield · 1 Oct 2020Acknowledged

The report gives no description here.

Open the report
InformationalSuggested Adherence of Checks-Effects-Interactions Pattern in HardRewards and VaultsHarvest audit · PeckShield · 1 Oct 2020Acknowledged

The report gives no description here.

Open the report
InformationalConsistent Handling of Vault Investment FractionHarvest audit · PeckShield · 1 Oct 2020Fixed

The report gives no description here.

Open the report
InformationalImproved Event GenerationHarvest audit · PeckShield · 1 Oct 2020Fixed

The report gives no description here.

Open the report
InformationalInconsistent/Misplaced Comments Among Multiple ContractsHarvest audit · PeckShield · 1 Oct 2020Fixed

The report gives no description here.

Open the report
Show 1 more
InformationalUnused Import Removal in RewardTokenHarvest audit · PeckShield · 1 Oct 2020Fixed

The report gives no description here.

Open the report

Incidents1

Attached through a shared contract address. Our incident data ends in Oct 2026.

Incident

Incident,

8 million through a series of flash loans and price manipulation.

Source: De.Fi incident database.

Audits before it
1.
Audits since
None on Trustblock.

Contracts

No deployed address is recorded for these audits.

The reports name a repository or files. Open a report to see its scope.

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
<div
data-tb-project-widget
data-tb-project-slug="ifarm"
></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us