infiniFi security record

Ethereuminfinifi.xyz

As of 22 Oct 2026, infiniFi has 6 audit reports by 1 security firm on Trustblock; the latest is by Cantina, dated 11 Dec 2025. Those reports list no open critical findings.

Critical findings
No open critical findings
Across 6 reports.
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.

Audits6

Newest first

AuditSecurity firmDateScopeCritical findingsReport
infiniFi PR 228Security firm: CantinaDate: Scope: Not recorded (see the report)No open critical findingsOpen · cantina.xyz
infiniFi PR 224Security firm: CantinaDate: Scope: Not recorded (see the report)No open critical findingsOpen · cantina.xyz
infiniFi PR 233Security firm: CantinaDate: Scope: Not recorded (see the report)No open critical findingsOpen · cantina.xyz
infiniFi PR 209Security firm: CantinaDate: Scope: Not recorded (see the report)No open critical findingsOpen · cantina.xyz
infiniFi PR 187Security firm: CantinaDate: Scope: Not recorded (see the report)No open critical findingsOpen · cantina.xyz
infiniFi: PR 167Security firm: CantinaDate: Scope: Not recorded (see the report)No open critical findingsOpen · cantina.xyz

Findings38

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical000
High023
Medium136
Low2813
Highconfig declared as memory prevents persistence of state updatesinfiniFi PR 209 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
HighEarly PT threshold lets anyone brick Pendle farm pre-initinfiniFi PR 209 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
HighLosses up to liquid buffer do not burn shares, overstating supplyinfiniFi PR 224 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
MediumAggregator swaps revert for secondary input tokensinfiniFi PR 209 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
Mediumassets() undercounts NAV when ERC-7540 requests transition to claimable stateinfiniFi PR 233 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
MediumCross-chain pause does not halt portalsinfiniFi PR 224 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
MediumMerkl claim sweeps entire farm balanceinfiniFi PR 233 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
MediumUnvalidated config in migrate may lead to loss of user fundsinfiniFi PR 209 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
MediumWithdraw slippage guard misappliedinfiniFi PR 233 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
LowAvoid updating interpolation when yieldToSmooth is zeroinfiniFi PR 228 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowChainlink oracle uses deprecated latestAnswer callinfiniFi PR 233 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
LowCoWSwap signing cooldown never enforcedinfiniFi PR 209 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
LowERC7540 farm uses raw ERC20.transfer functioninfiniFi PR 233 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
LowFluidRewardsClaimer recipient can be set to zero and changes are not emittedinfiniFi PR 228 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
LowMissing events on configuration and asset-management state transitionsinfiniFi PR 224 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
LowMissing staleness/heartbeat validation for Chainlink pricesinfiniFi PR 233 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
LowMissing storage gap in upgradeable base contract PortalBaseinfiniFi PR 224 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
LowPotential reentrancy during wrap/unwrap callsinfiniFi PR 209 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
LowSwap pair key collisions corrupt router configurationinfiniFi PR 209 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
LowSwapFarmV2 duration immutable left at zeroinfiniFi PR 209 · Cantina · 11 Dec 2025Fixed

The report gives no description here.

Open the report
Show 2 more
LowIncorrect handling of GSM quote causes over�approval and inaccurate slippage accounting in unwrapGHOToUSDCinfiniFi PR 187 · Cantina · 10 Sep 2025Fixed

The report gives no description here.

Open the report
LowMissing whenNotPaused on wrapGHOtoSGHOinfiniFi PR 187 · Cantina · 10 Sep 2025Fixed

The report gives no description here.

Open the report

Contracts

No deployed address is recorded for these audits.

The reports name a repository or files. Open a report to see its scope.

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
<div
data-tb-project-widget
data-tb-project-slug="infinifi"
></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us