Maple security record
As of 1 Nov 2026, Maple has 2 audit reports by 1 security firm on Trustblock; the latest is by Cantina, dated 5 Sep 2023. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits2
Newest first
Findings52
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 1 | 3 |
| Low | 0 | 7 | 40 |
HighFirst pool depositor can be front-run and have part of their deposit stolenMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportMediumInitial cycle time is wrong when queuing several config updatesMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportMediumTransitionLoanManager.add does not account for accrued interest since last callMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportMediumUnaccounted collateral is mishandled in triggerDefaultMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLow_getCollateralRequiredFor should round upMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowAdd additional checks to prevent refinancing/funding a closed loanMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowAdd encodeArguments/decodeArguments to WithdrawalManagerInitializerMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowAdditional verification in MapleLoanInitializerMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowAdditional verification in removeLoanImpairmentMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowAdditional verification that paymentIdOf[loan_] is not 0Maple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportShow 10 more
LowBad parameter encoding and deployment when using wrong initializersMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowBug in makePayment() reverts when called with small amountsMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowCache calculation in getExpectedAmountMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowCan check msg.sender != collateralAsset/fundsAsset for extra safetyMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowClean up updatePlatformServiceFeeMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowDocument restrictions on RefinancerMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowEvent LoanClosed might be emitted with the wrong valueMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowFor-Loop OptmizationMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowfullDaysLate computation can be optimizedMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowGlobals.poolDelegates[delegate_].ownedPoolManager mapping can be overwrittenMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportShow 10 more
LowIERC426 Implementation of preview and max functionsMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowIssuance rate for double-late claims does not need to be updatedMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowLiquidator uses different reentrancy guards than rest of codebaseMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowLoanManager redundant check on late paymentMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowMissing post-migration check in PoolManager.sol could result in lost fundsMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowNo need to explicitly initialize variables with default valuesMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowPool._divRoundUp can be more efficientMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowPool._requestRedeem reduces the wrong approval amountMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowPool.previewWithdraw always reverts but Pool.withdraw can succeedMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowPoolManager has low-level shares computation logicMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportShow 10 more
LowPoolManager.removeLoanManager does not clear loanManagers mappingMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowPoolManager.removeLoanManager errors with out-of-bounds if loan manager not foundMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowReorder WM.processExit parametersMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowReplace hard-coded value with PRECISION constantMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowSet domainEnd correctly in intermediate _advanceGlobalPaymentAccounting stepsMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowsetTimelockWindows checks isGovernor multiple timesMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowTypos / Incorrect documentationMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowUse block.timestamp instead of domainStart in removeLoanImpairmentMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowUse ERCHelper approve() as best practiceMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowUse of floating pragma versionMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportShow 4 more
LowUse the cached variable in makePaymentMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowUse whenProtocolNotPaused on migrate() instead of upgrade() for more complete protectionMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowUsers cannot resubmit a withdrawal request as per the wikiMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportLowwithdrawCover() vulnerable to reentrancyMaple V2 · Cantina · 2 Dec 2022Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="maple"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us