Incident
Incident,
Source: De.Fi incident database.
- Audits before it
- 6.
- Audits since
- None on Trustblock.
Radiant security record
As of 21 Oct 2026, Radiant has 6 audit reports by 3 security firms on Trustblock; the latest is by Pashov Audit Group, dated 26 Jul 2024. Those reports list no open critical findings. It also holds 2 incidents (latest 16 Oct 2024).
Critical findings
No open critical findings
Across the 6 reports, 5 critical findings were reported. Each is marked fixed by the firm that reported it. See the findings
Incident
Incident 16 Oct 2024
Source: De.Fi incident database. No audit on Trustblock is dated after it. See the incidents
Open the latest report
Your label, live
Get the label for your siteRecord last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits6
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Radiant security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Radiant Riz Audit | Security firm: OpenZeppelin | Date: | Scope: Files named in the report | 1 critical finding, fixed | Open · blog.openzeppelin.com |
| Radiant security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| Radiant security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded (see the report) | 2 critical findings, fixed | Open · GitHub |
| Radiant V2 Audit | Security firm: OpenZeppelin | Date: | Scope: Files named in the report | 1 critical finding, fixed | Open · blog.openzeppelin.com |
| Radiant Capital | Security firm: Zokyo | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · IPFS |
Findings141
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 5 |
| High | 0 | 1 | 13 |
| Medium | 0 | 11 | 35 |
| Low | 2 | 11 | 63 |
CriticalswapTokens Function Is UnusableRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportCriticalNo approvals from Helper to TokenizedLPRadiant security review · Pashov Audit Group · 6 Jul 2024Fixed
The report gives no description here.
Open the reportCritical_wethToRdnt() will certainly revert as rdntOut is always zeroRadiant security review · Pashov Audit Group · 1 Mar 2024Fixed
The report gives no description here.
Open the reportCriticalIncorrect token order passed for WETH -> RDNT swapsRadiant security review · Pashov Audit Group · 1 Mar 2024Fixed
The report gives no description here.
Open the reportCriticalEligibility Manipulation Leads to Stolen RewardsRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportHighspotTimeWeightedPrice and withSwapping may conflictRadiant security review · Pashov Audit Group · 26 Jul 2024Fixed
The report gives no description here.
Open the reportHighDuplicated Elements in Configuration Could Return the Wrong Amount During SwapsRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportHighOld Distributions May Still Exist After UpdatingRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportHighPotential Reentrancy in emergencyWithdrawRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportHighGriefing attack via continuous deposit and withdrawalRadiant security review · Pashov Audit Group · 6 Jul 2024Fixed
The report gives no description here.
Open the reportShow 10 more
HighUniV3TokenizedLp can be attacked by an initial donationRadiant security review · Pashov Audit Group · 6 Jul 2024Fixed
The report gives no description here.
Open the reportHighwithdraw() does not take into account the pending feeRadiant security review · Pashov Audit Group · 6 Jul 2024Fixed
The report gives no description here.
Open the reportHighIncorrect quoteWETH() implementation (out-of-scope)Radiant security review · Pashov Audit Group · 1 Mar 2024Fixed
The report gives no description here.
Open the reportHighBounty Hunters Can Incur a Denial-of-ServiceRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportHighIncorrect Accounting of earned and unlocked Tokens on exit May Brick the ProtocolRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportHighInitial Liquidity Can Be Lost by Front-Running Pool InitializationRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportHighRDNT Token Bridge Fee Can Be BypassedRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportHighVested RDNT Tokens Can Be Withdrawn Early With No PenaltiesRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportMediumdeposit may not mint liquidityRadiant security review · Pashov Audit Group · 26 Jul 2024Fixed
The report gives no description here.
Open the reportMediumNo price limit in zapWETHRadiant security review · Pashov Audit Group · 26 Jul 2024Fixed
The report gives no description here.
Open the reportShow 10 more
MediumswapIdleAndAddToLiquidity may be DoSedRadiant security review · Pashov Audit Group · 26 Jul 2024Fixed
The report gives no description here.
Open the reportMediumDistribution Changes Can Be Delayed or PreventedRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportMediumErroneous Condition in _setAssetSourceRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportMediumErroneous Validation After Market ShutdownRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportMediumETH For Oracle Fees Can Be Front-RunRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportMediumInsufficient Checks in addPoolRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportMediumJunk Data May Be Returned from getAllPoolDistributionsRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportMediumLooping Fees Can Be BypassedRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportMediumNative Asset Not Accounted for When SwappingRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportMediumOff-by-One Possible in deployFundsRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportShow 10 more
MediumOrder of Operations Will Reduce Output PrecisionRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportMediumPossible Revert In _depositToCoreLendingPoolRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportMediumPotential OverflowRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportMediumsetAddress Could Reset Module StorageRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportMediumAttacker can exploit oracle price differences to arbitrageRadiant security review · Pashov Audit Group · 6 Jul 2024Fixed
The report gives no description here.
Open the reportMediumBypassable checkLastBlockAction ModifierRadiant security review · Pashov Audit Group · 6 Jul 2024Fixed
The report gives no description here.
Open the reportMediumDepositing UniV3PoolHelper only once per block for all usersRadiant security review · Pashov Audit Group · 6 Jul 2024Fixed
The report gives no description here.
Open the reportMediumLack of slippage check in rebalance FunctionRadiant security review · Pashov Audit Group · 6 Jul 2024Fixed
The report gives no description here.
Open the reportMediumrebalance uses the wrong balanceRadiant security review · Pashov Audit Group · 6 Jul 2024Fixed
The report gives no description here.
Open the reportMediumThe pending fee should be settled before adjusting the feeRadiant security review · Pashov Audit Group · 6 Jul 2024Fixed
The report gives no description here.
Open the reportShow 10 more
MediumIncomplete Validation of Chainlink Price DataRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportMediumIncorrect Calculation of Tokens to Burn on withdrawRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportMediumIncorrect Earnings Accounting When ChefIncentivesController Reserve Is EmptyRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportMediumIncorrect Leveraged Borrow CalculationRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportMediumIncorrect Usage of Uniswap V2 OracleRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportMediumLack of Event EmissionRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportMediumLeveraged Positions May Receive Reduced Reward EmissionsRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportMediumLoss of RDNT Rewards When CompoundingRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportMediumMissing PriceProvider Oracle UpdatesRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportMediumMissing whenNotPaused ModifierRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportShow 10 more
MediumPossible Denial-of-Service for CompoundingRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportMediumSlippage Tolerances May Be Too LargeRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportMediumUse of Deprecated Chainlink FunctionRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowDocstrings Referencing Previous AuthorsRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportLowIncomplete DocstringsRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportLowInitialization Chain Is Not CompleteRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportLowLack of Event EmissionRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportLowLack of Validation on setAddressAsProxyRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportLowLinkage of Modules and/or Markets Can Be Altered After Becoming OperationalRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportLowNaming IssuesRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowOnly One Type of swapStrategyRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportLowPyth Feeds Exponent UncheckedRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportLowRegular Dependency Used Instead of UpgradeableRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportLowRizLeverager Could Fail During loopRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportLowuint256 Casted to EnumRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportLowUnchecked transfer/transferFrom CallRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportLowUnneeded WETH Functionality in RizLeveragerRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportLowUnsafe CastsRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportLowUnused ConstantRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportLowUnused ErrorsRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowWETH Gateway Works for Any TokenRadiant Riz Audit · OpenZeppelin · 23 Jul 2024Fixed
The report gives no description here.
Open the reportLowgetTotalAmounts and getBasePosition may be DOSedRadiant security review · Pashov Audit Group · 6 Jul 2024Fixed
The report gives no description here.
Open the reportLowMissing oracle decimal normalizationRadiant security review · Pashov Audit Group · 6 Jul 2024Fixed
The report gives no description here.
Open the reportLowNo pending income in functionsRadiant security review · Pashov Audit Group · 6 Jul 2024Fixed
The report gives no description here.
Open the reportLowNot used approvalsRadiant security review · Pashov Audit Group · 6 Jul 2024Fixed
The report gives no description here.
Open the reportLowLockZap.quoteFromToken() uses incorrect API for estimationsRadiant security review · Pashov Audit Group · 1 Mar 2024Fixed
The report gives no description here.
Open the reportLowRoutes can be more strictly checkedRadiant security review · Pashov Audit Group · 1 Mar 2024Fixed
The report gives no description here.
Open the reportLowTwo WETH addresses are stored in the same contractRadiant security review · Pashov Audit Group · 1 Mar 2024Fixed
The report gives no description here.
Open the reportLowUniswapPoolHelper doesn't inherit IUniswapPoolHelperRadiant security review · Pashov Audit Group · 1 Mar 2024Fixed
The report gives no description here.
Open the reportLowUnused codeRadiant security review · Pashov Audit Group · 1 Mar 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowAssets With More Than 18 Decimals Not Supported for ZappingRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowCommented-Out CodeRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowDuplicate Emission Schedules Are AllowedRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowDuplicated CodeRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowFlawed lastEligibleTime FunctionRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowInconsistent Amount Calculation When Providing LiquidityRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowInconsistent Use of Named Return ValuesRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowIncorrect Bounty Returned When BountyManager Reserve Is LowRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowIncorrect Event EmissionRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowIncorrect Fee Returned in Case Compounding Is Not Being ExecutedRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowIncorrect Input ValidationRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowIncorrect or Inconsistent Error TypesRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowIncorrect Use of AssertRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowIncorrect Value Used for Slippage CalculationsRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowInvalid Reward Tokens Can Brick Reward ClaimingRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowLack of Access Control for LiquidityZap Contract InitializationRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowLack of Access Control on Pool Helper swapToWeth FunctionsRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowLack of gap Variable in Base ContractRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowLack of Input ValidationRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowLocked ETH in ContractsRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowLockZap Does Not Correctly Enforce Maximum Borrowing PowerRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowLogic Contracts Initialization Is AllowedRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowMisleading Naming for Variables and FunctionsRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowMissing Error Message in require StatementRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowMissing or Incorrect DocstringsRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowMissing Slippage Protection for Direct ZappingRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowMissing Zero Address ChecksRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowRDNT Bridge Fee Is Being OverchargedRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowShadowed initialized VariableRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowTokens May Get Stuck in Compounder ContractRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportShow 6 more
LowUnchecked ERC-20 Return ValueRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowUnnecessary access control and incorrect mutabilityRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowUnnecessary Truncation of Balancer LP Total SupplyRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowUnsafe ABI EncodingRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowUsage of Insecure Approval FunctionsRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowUse of Hard-Coded ValuesRadiant V2 Audit · OpenZeppelin · 18 Oct 2023Fixed
The report gives no description here.
Open the reportIncidents2
Attached through a shared contract address. Our incident data ends in Oct 2026.
Incident
Incident,
5 million loss in ETH due to flash loan attack.
Source: De.Fi incident database.
- Audits before it
- 2.
- Audits since
- 4, the latest dated 26 Jul 2024.
Contracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="radiant-capital"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us