Ribbon Finance security record
As of 21 Oct 2026, Ribbon Finance has 2 audit reports by 2 security firms on Trustblock; the latest is by OpenZeppelin, dated 9 Sep 2021. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits2
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Ribbon Finance Audit | Security firm: OpenZeppelin | Date: | Scope: Files named in the report | 1 critical finding, fixed | Open · blog.openzeppelin.com |
| Ribbon Finance audit | Security firm: PeckShield | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
Findings27
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 2 |
| Medium | 1 | 0 | 5 |
| Low | 4 | 0 | 14 |
Critical[C01] Instant withdrawals can disable essential vault functionalityRibbon Finance Audit · OpenZeppelin · 9 Sep 2021Fixed
The report gives no description here.
Open the reportHigh[H01] Corruptible storage upgradeability patternRibbon Finance Audit · OpenZeppelin · 9 Sep 2021Fixed
The report gives no description here.
Open the reportHighPossible Sandwich/MEV Attacks To Collect Most ProfitsRibbon Finance audit · PeckShield · 31 Mar 2021Fixed
The report gives no description here.
Open the reportMedium[M01] Documentation issuesRibbon Finance Audit · OpenZeppelin · 9 Sep 2021Fixed
The report gives no description here.
Open the reportMedium[M02] Rounds with no locked asset can lead to fee miscalculationsRibbon Finance Audit · OpenZeppelin · 9 Sep 2021Fixed
The report gives no description here.
Open the reportMedium[M04] Inconsistent usage of reentrancy guardRibbon Finance Audit · OpenZeppelin · 9 Sep 2021Fixed
The report gives no description here.
Open the reportMedium[M05] Vault fees are miscalculatedRibbon Finance Audit · OpenZeppelin · 9 Sep 2021Fixed
The report gives no description here.
Open the reportMediumPossible Costly Pool Tokens From Improper InitializationRibbon Finance audit · PeckShield · 31 Mar 2021Fixed
The report gives no description here.
Open the reportLow[L01] Numerous uint types and resultant casts increase system complexityRibbon Finance Audit · OpenZeppelin · 9 Sep 2021Fixed
The report gives no description here.
Open the reportLow[L02] Instances of unnecessarily convoluted control flowRibbon Finance Audit · OpenZeppelin · 9 Sep 2021Fixed
The report gives no description here.
Open the reportShow 10 more
Low[L03] Duplicated codeRibbon Finance Audit · OpenZeppelin · 9 Sep 2021Fixed
The report gives no description here.
Open the reportLow[L04] Duplicated price per share calculationsRibbon Finance Audit · OpenZeppelin · 9 Sep 2021Fixed
The report gives no description here.
Open the reportLow[L05] Inconsistent upper bounds on optionAllocationPctRibbon Finance Audit · OpenZeppelin · 9 Sep 2021Fixed
The report gives no description here.
Open the reportLow[L06] Lack of input validationRibbon Finance Audit · OpenZeppelin · 9 Sep 2021Fixed
The report gives no description here.
Open the reportLow[L08] Mismatched lower bounds for vault feesRibbon Finance Audit · OpenZeppelin · 9 Sep 2021Fixed
The report gives no description here.
Open the reportLow[L11] Identical constants defined independentlyRibbon Finance Audit · OpenZeppelin · 9 Sep 2021Fixed
The report gives no description here.
Open the reportLow[L12] Solidity version varies, is not the most recentRibbon Finance Audit · OpenZeppelin · 9 Sep 2021Fixed
The report gives no description here.
Open the reportLow[L14] Casting between types without overflow checksRibbon Finance Audit · OpenZeppelin · 9 Sep 2021Fixed
The report gives no description here.
Open the reportLow[L15] Unused codeRibbon Finance Audit · OpenZeppelin · 9 Sep 2021Fixed
The report gives no description here.
Open the reportLow[L16] Error-prone variable shadowingRibbon Finance Audit · OpenZeppelin · 9 Sep 2021Fixed
The report gives no description here.
Open the reportShow 2 more
LowAccommodation of approve() IdiosyncrasiesRibbon Finance audit · PeckShield · 31 Mar 2021Fixed
The report gives no description here.
Open the reportLowImproved Sanity Checks For System ParametersRibbon Finance audit · PeckShield · 31 Mar 2021Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="ribbon-finance"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us