Resolv USR security record
As of 10 Nov 2026, Resolv USR has 7 audit reports by 1 security firm on Trustblock; the latest is by Pashov Audit Group, dated 27 Jul 2025. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Audits7
Newest first
| Report | Security firm | Date | Scope | Critical findings | Source |
|---|---|---|---|---|---|
| Resolv security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded; see the report | 1 critical finding, fixed | GitHub ↗ |
| Resolv security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Resolv security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Resolv security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Resolv security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Resolv security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Resolv security review - wstUSR | Security firm: Pashov Audit Group | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
Findings52
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 13 |
| Low | 0 | 16 | 21 |
CriticalRewards can be stolen by transferring tokens to oneselfResolv security review · Pashov Audit Group · 27 Jul 2025Fixed
The report gives no description here.
Open the reportHightransferFee() uses an incorrect transfer methodResolv security review · Pashov Audit Group · 12 Dec 2024Fixed
The report gives no description here.
Open the reportMediumwithdraw() allows reward claims when claimEnabled is disabledResolv security review · Pashov Audit Group · 15 May 2025Fixed
The report gives no description here.
Open the reportMediumGriefing attack on claimable rewardsResolv security review · Pashov Audit Group · 17 Apr 2025Fixed
The report gives no description here.
Open the reportMediumLack of instantRedeemWithPxEth supportResolv security review · Pashov Audit Group · 15 Nov 2024Fixed
The report gives no description here.
Open the reportMediumNot supporting IERC1155Receiver interface IDResolv security review · Pashov Audit Group · 15 Nov 2024Fixed
The report gives no description here.
Open the reportMediumBurning could be DOSed in case a large number of burn requests are processedResolv security review · Pashov Audit Group · 1 Sep 2024Fixed
The report gives no description here.
Open the reportMediumIncorrect stake limit checkResolv security review · Pashov Audit Group · 1 Sep 2024Fixed
The report gives no description here.
Open the reportMediumNo mechanism to exit isolation mode once enteredResolv security review · Pashov Audit Group · 1 Sep 2024Fixed
The report gives no description here.
Open the reportMediumUsers' funds may be temporarily frozen when the treasury lacks fundsResolv security review · Pashov Audit Group · 1 Sep 2024Fixed
The report gives no description here.
Open the reportShow 10 more
MediumWithdrawal of collateral should not be restricted to only allowed providersResolv security review · Pashov Audit Group · 1 Sep 2024Fixed
The report gives no description here.
Open the reportMediumIncorrect rounding in previewWithdraw function leads to residual wstUSR balanceResolv security review - wstUSR · Pashov Audit Group · 29 Jul 2024Fixed
The report gives no description here.
Open the reportMediummintWithPermit provides the wrong amount to the usrPermit.permitResolv security review - wstUSR · Pashov Audit Group · 29 Jul 2024Fixed
The report gives no description here.
Open the reportMediumThe returned stUSRAmount from the unwrap operation may be inaccurate due to roundingResolv security review - wstUSR · Pashov Audit Group · 29 Jul 2024Fixed
The report gives no description here.
Open the reportMediumwstUSR.previewWithdraw could return 0 and result in free withdrawResolv security review - wstUSR · Pashov Audit Group · 29 Jul 2024Fixed
The report gives no description here.
Open the reportLow_update function lacks the nonReentrant modifierResolv security review · Pashov Audit Group · 27 Jul 2025Fixed
The report gives no description here.
Open the reportLowClaimable reward view function does not reflect up-to-date reward dataResolv security review · Pashov Audit Group · 17 Apr 2025Fixed
The report gives no description here.
Open the reportLowExcessive privileges of admin over staked tokensResolv security review · Pashov Audit Group · 17 Apr 2025Fixed
The report gives no description here.
Open the reportLowFirst staker post-zero supply claims all rewardsResolv security review · Pashov Audit Group · 17 Apr 2025Fixed
The report gives no description here.
Open the reportLowPrecision error in reward calculation may lock tokensResolv security review · Pashov Audit Group · 17 Apr 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowPrecision loss in accRewardPerToken leads to zero rewardsResolv security review · Pashov Audit Group · 17 Apr 2025Fixed
The report gives no description here.
Open the reportLowReentrancyGuardUpgradeable is not initializedResolv security review · Pashov Audit Group · 17 Apr 2025Fixed
The report gives no description here.
Open the reportLowReward tokens locked if _totalEffectiveSupply is 0 at period endResolv security review · Pashov Audit Group · 17 Apr 2025Fixed
The report gives no description here.
Open the reportLowRewards not sent to specified receiver during withdrawalResolv security review · Pashov Audit Group · 17 Apr 2025Fixed
The report gives no description here.
Open the reportLowAave V3 price source can be inaccurateResolv security review · Pashov Audit Group · 12 Dec 2024Fixed
The report gives no description here.
Open the reportLowMissing slippage protection in redeem functionResolv security review · Pashov Audit Group · 12 Dec 2024Fixed
The report gives no description here.
Open the reportLowMissing upper limit validationResolv security review · Pashov Audit Group · 12 Dec 2024Fixed
The report gives no description here.
Open the reportLowapxETH should be deposited directly into the treasuryResolv security review · Pashov Audit Group · 15 Nov 2024Fixed
The report gives no description here.
Open the reportLowdineroRedeem uses incorrect operation typeResolv security review · Pashov Audit Group · 15 Nov 2024Fixed
The report gives no description here.
Open the reportLowemergencyWithdrawETH is not neededResolv security review · Pashov Audit Group · 15 Nov 2024Fixed
The report gives no description here.
Open the reportShow 6 more
LowImpossible to decrease allowance for delisted spendersResolv security review · Pashov Audit Group · 1 Sep 2024Fixed
The report gives no description here.
Open the reportLowMissing rate mode assertion in getCurrentDebtResolv security review · Pashov Audit Group · 1 Sep 2024Fixed
The report gives no description here.
Open the reportLowRLP can be added as collateral token in LPExternalRequestsManagerResolv security review · Pashov Audit Group · 1 Sep 2024Fixed
The report gives no description here.
Open the reportLowSuperfluous ERC20 approval in aaveBorrowResolv security review · Pashov Audit Group · 1 Sep 2024Fixed
The report gives no description here.
Open the reportLowPotential accumulation of dust amounts of stUSR in the contract due to roundingResolv security review - wstUSR · Pashov Audit Group · 29 Jul 2024Fixed
The report gives no description here.
Open the reportLowWstUSR is not EIP-4626 compliantResolv security review - wstUSR · Pashov Audit Group · 29 Jul 2024Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="resolv"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us