Midas RWA security record
As of 10 Nov 2026, Midas RWA has 3 audit reports by 2 security firms on Trustblock; the latest is by Sherlock, dated 27 Aug 2024. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Audits1· Audit competitions 2
Newest first
| Report | Security firm | Date | Scope | Critical findings | Source |
|---|---|---|---|---|---|
| Midas auditAudit competition | Security firm: Sherlock | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Midas auditAudit competition | Security firm: Sherlock | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Midas / Vault | Security firm: Hacken | Date: | Scope: Repository at commit d84b0ed | None open | Original removed |
Findings17
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 1 | 0 |
| Medium | 1 | 1 | 8 |
| Low | 1 | 0 | 0 |
MediumCorruptible Upgradability PatternMidas audit · Sherlock · 27 Aug 2024Fixed
The report gives no description here.
Open the reportMediumDiscrepancy between spec and code: Vault admin cannot update tokensReceiver.Midas audit · Sherlock · 27 Aug 2024Fixed
The report gives no description here.
Open the reportMediumMBasisRedemptionVaultWithSwapper does not update mBasis daily limit or allowance when conducting mBasis->mTBill swap.Midas audit · Sherlock · 27 Aug 2024Fixed
The report gives no description here.
Open the reportMediumRedemptionVaultWIthBUIDL does not redeem full balance if BUIDL balance is less than 250k post transaction.Midas audit · Sherlock · 27 Aug 2024Fixed
The report gives no description here.
Open the reportMediumRedemptionVaultWIthBUIDL.sol#redeemInstant will always DoS due to incorrect contract call.Midas audit · Sherlock · 27 Aug 2024Fixed
The report gives no description here.
Open the reportMediumStandard redemption in RedemptionVault does not update token allowance.Midas audit · Sherlock · 27 Aug 2024Fixed
The report gives no description here.
Open the reportMediumCorruptible Upgradability PatternMidas audit · Sherlock · 31 May 2024Fixed
The report gives no description here.
Open the reportMediumMissing Oracle Refresh Check Can Lead To Outdated PricingMidas / Vault · Hacken · 12 Jan 2024Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="midas"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us