Pecunity security record
As of 14 Oct 2026, Pecunity has 2 audit reports by 2 security firms on Trustblock; the latest is by CFG Ninja, dated 18 Nov 2025. Those reports list 1 open critical finding. It also holds 1 deployed contract on 1 chain.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Statuses are the security firms’ own. Trustblock does not review code.
Audits2
Newest first
Findings19
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 1 | 0 | 0 |
| High | 1 | 0 | 1 |
| Medium | 1 | 0 | 5 |
| Low | 0 | 1 | 9 |
HighMissing access control on critical FeeController settersStrategy Builder Plugin Audit Report · Cyfrin · 17 Jul 2025Fixed
The report gives no description here.
Open the reportMediumAutomation DoS via blacklisted or reverting fee recipientsStrategy Builder Plugin Audit Report · Cyfrin · 17 Jul 2025Fixed
The report gives no description here.
Open the reportMediumDoS of strategy execution due to array indices out of boundsStrategy Builder Plugin Audit Report · Cyfrin · 17 Jul 2025Fixed
The report gives no description here.
Open the reportMediumFee calculations break when token decimals are different from 18Strategy Builder Plugin Audit Report · Cyfrin · 17 Jul 2025Fixed
The report gives no description here.
Open the reportMediumMissing staleness check in PriceOracle::getTokenPriceStrategy Builder Plugin Audit Report · Cyfrin · 17 Jul 2025Fixed
The report gives no description here.
Open the reportMediumVolume-based fee can be bypassed with a wrapper contractStrategy Builder Plugin Audit Report · Cyfrin · 17 Jul 2025Fixed
The report gives no description here.
Open the reportLowAccumulation of dust amounts due to rounding in _tokenDistribution()Strategy Builder Plugin Audit Report · Cyfrin · 17 Jul 2025Fixed
The report gives no description here.
Open the reportLowArray length used in multiple loop iterations can be cachedStrategy Builder Plugin Audit Report · Cyfrin · 17 Jul 2025Fixed
The report gives no description here.
Open the reportLowautomationsToIndex storage is not correctly reset when deleting automationsStrategy Builder Plugin Audit Report · Cyfrin · 17 Jul 2025Fixed
The report gives no description here.
Open the reportLowDoS of automation due to potential zero value transfer revertsStrategy Builder Plugin Audit Report · Cyfrin · 17 Jul 2025Fixed
The report gives no description here.
Open the reportShow 5 more
LowEmpty strategies can be created due to missing zero length checkStrategy Builder Plugin Audit Report · Cyfrin · 17 Jul 2025Fixed
The report gives no description here.
Open the reportLowPositive Pyth oracle exponents should be explicitly handledStrategy Builder Plugin Audit Report · Cyfrin · 17 Jul 2025Fixed
The report gives no description here.
Open the reportLowUnused cached value of getStorageId(msg.sender, id)Strategy Builder Plugin Audit Report · Cyfrin · 17 Jul 2025Fixed
The report gives no description here.
Open the reportLowUse named return variablesStrategy Builder Plugin Audit Report · Cyfrin · 17 Jul 2025Fixed
The report gives no description here.
Open the reportLowZero price validation could be included in the price oracleStrategy Builder Plugin Audit Report · Cyfrin · 17 Jul 2025Fixed
The report gives no description here.
Open the reportContracts1
| Address | Chain | Source code |
|---|---|---|
| 0x413c2834f02003752d6cc0bcd1ce85af04d62fbe | Chain: BNB Chain | Source code: Verified source |
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="pecunity"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us