Native v2 security record
As of 1 Nov 2026, Native v2 has 1 audit report on Trustblock, by Quantstamp, dated 6 Jan 2025. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Native v2 (Security Review) | Security firm: Quantstamp | Date: | Scope: Files named in the report | No open critical findings | Open · certificate.quantstamp.com |
Findings18
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 2 |
| Medium | 0 | 3 | 3 |
| Low | 3 | 5 | 1 |
LowPossible Division by ZeroNative v2 (Security Review) · Quantstamp · 6 Jan 2025Open
The variables `totalUnderlying` and `totalShares` are both used as denominators in critical functions. While the denominators are checked to prevent division by zero in most places, this check is missing in some places. Specifically, the functions `deposit()` and `getSharesByUnderlying()` do not check against `totalUnderlying == 0`, while the function `redeem()` does not check against `totalShares == 0`.
Open the reportLowPossible Empty Market AttackNative v2 (Security Review) · Quantstamp · 6 Jan 2025Open
The `CreditVault.sol` contract enables trading in a market through the `supportMarket()` function. This function adds the market corresponding to a `LPToken.sol` contract instance. However, no checks or initialization takes place within this function to ensure that the market is indeed ready to be traded. The exact impact of this issue is unclear because documentation or specification for this procedure is unavailable. The conditions and invariant that must hold for the market to be tradable is also unclear and not documented. Given the lack of information we have marked it as an Undetermined, as there is still the possibility of system failure due to a transaction being called to a market that has not been properly initialized.
Open the reportLowRisks of Supporting Non-Standard ERC-20 TokensNative v2 (Security Review) · Quantstamp · 6 Jan 2025Open
Supporting tokens with specific features such as fees, rebasing, pausable, upgradeable, blacklistable, or hooks on transfers could negatively impact the main flows of the system if no specific mitigation measure is enforced to limit the consequences.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="native-v2"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us