NOYA security record
As of 3 Nov 2026, NOYA has 1 audit report on Trustblock, by Hacken, dated 19 Apr 2024. That report lists no open critical findings.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| NOYA / Vault | Security firm: Hacken | Date: | Scope: Files named in the report | No open critical findings | Open · hacken.io |
Findings46
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 2 |
| Medium | 5 | 0 | 10 |
| Low | 5 | 0 | 24 |
HighonERC721Received callback is never called which leads to loss of liquidityNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportHighThe non-updated totalDepositedAmount causes the incorrect calculation of the profitNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportMediumChainlink’s latestRoundData might return stale or incorrect resultsNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportMediumMinting of performance fees may cause temporary shares inflationNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportMediumMissing access control in public functions leads to an unauthorized accessNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportMediumMissing call to update holding position results in miscalculated TVLNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportMediumPublic ERC4626 functions bypass the protocol intended ABINOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportMediumThe flashLoan process is not complete, since the assets are not transferred back in the receiveFlashLoan() callbackNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportMediumThe non-updated totalProfitCalculated causes leads to the incorrect number of fee sharesNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportMediumUncontrolled loop of storage interactions may lead to Denial Of ServiceNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportShow 10 more
MediumUnlimited allowance is set by defaultNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportMediumUSD decimals are incorrectly setNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowDefault compiler behavior leads to the gas increase in the for loopNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowDeposit limit check counts deposited amount twiceNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowDirect reset of the minimumHealthFactor allows to bypass the MINIMUM_HEALTH_FACTOR checkNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowHigh oracle refresh check can lead to outdated pricingNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowImproper threshold violates the requirements of multi-signature walletNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowIncorrect return valueNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowLifiImplementation contract is incompatible with non-standard ERC20 tokensNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowLoop for storage array length wastes extra GasNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowMissing access control in burning allow shares supply manipulationNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowMissing argument names in functionNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowMissing checks for the zero addressNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowMissing events emitting for critical functionsNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowMissing expiration timestamp can lead to unexpected resultsNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowMissing return value check for tokens transfers may lead to unexpected behaviorNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowMissing revert statement causes the funds to be stuck in AccountingManager if the connector is not enabledNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowMissing two-step transfer of ownership introduces risksNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowMultiplication after division may result in precision lossNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowNon-standard filenameNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportShow 6 more
LowSub-optimal management of fees valuesNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowThe direct usage of the Aerdrome Pool's functions leads to the extra gas and creates security risksNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowThe Keepers contract is not EIP712 compliantNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowThe usage of the precompile ecrecover can lead to signature mailabilityNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowUnused return valueNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportLowUse of transfer instead of call to send native assetsNOYA / Vault · Hacken · 19 Apr 2024Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="noya"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us