Reyts security record
As of 10 Nov 2026, Reyts has 1 audit report on Trustblock, by Certora, dated 22 May 2026. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Audits1
Newest first
Findings15
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 2 |
| Low | 0 | 0 | 5 |
HighDue to storing all refHashes in the instance storage of the old mint controller, the new mint controller will be permanently DoSd after ~1300-1400 mintsReytsCAD · Certora · 22 May 2026Fixed
The report gives no description here.
Open the reportMediumDeposit cap checks are ineffective as they’re per partner, rather than per assetReytsCAD · Certora · 22 May 2026Fixed
The report gives no description here.
Open the reportMediumRate band override mechanism can be circumvented with a sequence of transactionsReytsCAD · Certora · 22 May 2026Fixed
The report gives no description here.
Open the reportLowAll propose_* functions silently overwrite pending stateReytsCAD · Certora · 22 May 2026Fixed
The report gives no description here.
Open the reportLowGovernance has no per tx/ daily cap on treasury_send and burn_from_poolReytsCAD · Certora · 22 May 2026Fixed
The report gives no description here.
Open the reportLowNot removing certain instance key-value pairs but only setting them to false can lead to storage bloatReytsCAD · Certora · 22 May 2026Fixed
The report gives no description here.
Open the reportLowThe treasury address in the Governance contract can’t be changedReytsCAD · Certora · 22 May 2026Fixed
The report gives no description here.
Open the reportLowvault.draw does not check partner_allowedReytsCAD · Certora · 22 May 2026Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="reyts"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us