Sky security record
As of 3 Nov 2026, Sky has 150 audit reports by 3 security firms on Trustblock; the latest is by ChainSecurity, dated 7 Sep 2026. Those reports list no open critical findings. It also holds 1 deployed contract on 1 chain.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Audits150
Newest first
150 audit reports, 77 in Cantina’s series, 68 in ChainSecurity’s series
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Sky: Keel ALM Controller v1. | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Sky: Solana Bridge Migration | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Sky: Migration NTT Manager EVM | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Sky: Migration NTT Manager Solana | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Sky: LZ Solana Governance | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Sky: LZ Governance EVM | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Sky: LZ Governance Relay | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Sky: LZ EVM Token Bridge | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Sky: Solana Cross-chain Payloads for LZ Migration | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Sky: LZ Solana Token Bridge | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| WH LZ Migration | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Wormhole LayerZero Migration Library | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Sky: Star Guard | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| DSS Flappers | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Dss Flappers | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Solana Crosschain Governance Payload Scripts | Security firm: ChainSecurity | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · chainsecurity.com |
| Sky Wormhole NTT Migration Update | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Sky Governance OApp | Security firm: ChainSecurity | Date: | Scope: Files named in the report | 1 critical finding, fixed | Open · chainsecurity.com |
| Lockstake: Sky Max Price Oracle | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Lockstake Smart Contracts | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Star Guard | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| stUSDS | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Lockstake | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Sky Rates Converter | Security firm: ChainSecurity | Date: | Scope: Repository at commit a36dec2 | No open critical findings | Open · chainsecurity.com |
| MakerDAO Sky smart contracts | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
Findings204
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 0 | 6 |
| Medium | 2 | 5 | 17 |
| Low | 6 | 59 | 107 |
Marked Informational or Gas Optimization by the firms. Not counted as findings.
InformationalActivating SSROracle can change CCIPDVNAdapter allowlist semanticsSky: LZ SSR Oracle Init · Cantina · 4 Sep 2026Acknowledged
The report gives no description here.
Open the reportInformationalAvoid LayerZero uint32.max / READ_CHANNEL_1 collision for sentinel IDSky: OFT Adapter v2 · Cantina · 4 Sep 2026Acknowledged
The report gives no description here.
Open the reportInformationalLZGovBridgeReceiver public getters can swallow a payload whose selector collidesSky: Stars LZ Governance · Cantina · 4 Sep 2026Acknowledged
The report gives no description here.
Open the reportInformationalmigrateAvax opens the L1 OFT before the Avalanche adapter can mintSky: Avalanche LZ Re-enabling · Cantina · 4 Sep 2026Acknowledged
The report gives no description here.
Open the reportInformationalMinor issues, Typos & DocumentationSky: Stars LZ Governance · Cantina · 4 Sep 2026Acknowledged
The report gives no description here.
Open the reportInformationalMinor issues, Typos & DocumentationSky: OFT Adapter v2 · Cantina · 4 Sep 2026Acknowledged
The report gives no description here.
Open the reportInformationalReturn zero quote limits for SENTINEL_EIDSky: OFT Adapter v2 · Cantina · 4 Sep 2026Acknowledged
The report gives no description here.
Open the reportInformationalSSR activation accepts an executor message limit below the required payload sizeSky: LZ SSR Oracle Init · Cantina · 4 Sep 2026Acknowledged
The report gives no description here.
Open the reportInformationalMinor issues, Typos & DocumentationSky: PAS configurator-unit · Cantina · 11 Aug 2026Acknowledged
The report gives no description here.
Open the reportInformationalPASInit.pauseTimelock can remove an existing pauserSky: PAS configurator-unit · Cantina · 11 Aug 2026Acknowledged
The report gives no description here.
Open the reportShow 10 more
InformationalHalo issue rate-limit key omits the facility gemSky: PAU NFAT Facet · Cantina · 6 Jul 2026Acknowledged
The report gives no description here.
Open the reportInformationalMinor issues, Typos & DocumentationSky: PAU NFAT Facet · Cantina · 6 Jul 2026Acknowledged
The report gives no description here.
Open the reportInformationalPAU cannot transfer NFTsSky: PAU NFAT Facet · Cantina · 6 Jul 2026Acknowledged
The report gives no description here.
Open the reportInformationalDVNBroadcaster should explicitly reject malformed packet header lengthsSky: LZ DVN Broadcaster · Cantina · 25 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalAvoid bidirectional setup for one-way Sky Gov bridgeSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalCCIP adapter pauser does not pause any CCIP adapter flowSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalCCIP service limits can revert adapter sendsSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalCCIPDVNAdapter normalizes endpoint ids and aliases v1/v2 route configurationSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalCCIPDVNAdapter reverts on any DVN-targeted optionSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalCCIPDVNAdapterFeeLib ignores configured floorMarginUSDSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportShow 10 more
InformationalDVN adapter vs OApp receive library misconfigurationSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalDVN fees can be discounted below cost breaking bridging longtermSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalImplicit fee quote assumption on message byte contentsSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalMinor issues, Typos & DocumentationSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalDeploy script does not check that admin is not address(0)PAU: Diamond PAU Deployment Scripts & Deployment R · Cantina · 10 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalMakefile deploy targets can run with wrong config and leave partial deploymentsPAU: Diamond PAU Deployment Scripts & Deployment R · Cantina · 10 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalMissing view from quoteTransferPAU: Diamond PAU Deployment Scripts & Deployment R · Cantina · 10 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalKamino klend referral rewards cannot be claimedSky: Keel ALM Controller v1. · Cantina · 25 Nov 2025Acknowledged
The report gives no description here.
Open the reportInformationalNot forwarding remaining_accounts to initialize_user could result in revert on DriftSky: Keel ALM Controller v1. · Cantina · 25 Nov 2025Acknowledged
The report gives no description here.
Open the reportInformationalStoring pool_id in Drift IntegrationConfig might not be necessarySky: Keel ALM Controller v1. · Cantina · 25 Nov 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
InformationalAdding a whenPaused modifier and an event to NttManager.migrateLockedTokensSky: Migration NTT Manager EVM · Cantina · 28 Oct 2025Acknowledged
The report gives no description here.
Open the reportInformationalAsync state between EVM ⇔ SOL bridge during the migrationSky: Migration NTT Manager EVM · Cantina · 28 Oct 2025Acknowledged
The report gives no description here.
Open the reportInformationalAsync state between EVM ⇔ SOL bridge during the migrationSky: Migration NTT Manager Solana · Cantina · 28 Oct 2025Acknowledged
The report gives no description here.
Open the reportInformationalcompute_fee_and_adjust_amount fee computations not aligned with EVM and can be optimizedSky: LZ Solana Token Bridge · Cantina · 28 Oct 2025Acknowledged
The report gives no description here.
Open the reportInformationalMissing paused activation in migration plan for Ethereum and Solana NTTSky: Migration NTT Manager EVM · Cantina · 28 Oct 2025Acknowledged
The report gives no description here.
Open the reportInformationalMissing paused activation in migration plan for Ethereum and Solana NTTSky: Migration NTT Manager Solana · Cantina · 28 Oct 2025Acknowledged
The report gives no description here.
Open the reportInformationalNot all instruction from lz_receive_types_v2 are required to be executedSky: LZ Solana Governance · Cantina · 28 Oct 2025Acknowledged
The report gives no description here.
Open the reportInformationalRequire paused state before calling transfer_mint_authoritySky: Migration NTT Manager Solana · Cantina · 28 Oct 2025Acknowledged
The report gives no description here.
Open the reportInformationalUnchecked target on destination chain could be used to manage GovernanceOAppReceiver's LZ configurationSky: LZ Governance EVM · Cantina · 28 Oct 2025Acknowledged
The report gives no description here.
Open the reportInformationalUsing custom error like TransfersDisabled instead of removing the NttManager.transferSky: Migration NTT Manager EVM · Cantina · 28 Oct 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
InformationalmaxDelay can be set to zero allowing execution only in the same block as the plot callSky: Star Guard · Cantina · 23 Oct 2025Acknowledged
The report gives no description here.
Open the reportInformationalPayable SubProxy.exec is not supported by StarGuardSky: Star Guard · Cantina · 23 Oct 2025Acknowledged
The report gives no description here.
Open the reportInformationalStarGuard can't deny itself on the subProxy in case of a StarGuard migration eventSky: Star Guard · Cantina · 23 Oct 2025Acknowledged
The report gives no description here.
Open the reportInformationalStarGuard.exec doesn't returned bytes memory out from subProxy.execSky: Star Guard · Cantina · 23 Oct 2025Acknowledged
The report gives no description here.
Open the reportInformationalThe current design does not offer multiple spells for the same SubProxySky: Star Guard · Cantina · 23 Oct 2025Acknowledged
The report gives no description here.
Open the reportInformationalMismatch between main functions and the preview*() counterpart behaviour when chi == 0stUSDS · Cantina · 18 Aug 2025Acknowledged
The report gives no description here.
Open the reportInformationalMixed usage of DAI and USDS in commentsLockstake · Cantina · 18 Aug 2025Acknowledged
The report gives no description here.
Open the reportInformational_update doesn't validate the identityNetwork membership of the transfer initiatorAcknowledged
The report gives no description here.
InformationaladdInitControllerActions requires full call parameter specification leading to potential aBEAM operational overheadAcknowledged
The report gives no description here.
InformationalAdditional verification checks for bridge farm scriptsAcknowledged
The report gives no description here.
Show 10 more
InformationalAllow unlimited maxAmount regardless of slope in Configurator rate limit setupAcknowledged
The report gives no description here.
InformationalAn ilk collateral can't have the names DSR or SSR for the DSPC module to work correctlyAcknowledged
The report gives no description here.
InformationalArranger has full control over deposited fundsAcknowledged
The report gives no description here.
InformationalAsymmetric fee structureAcknowledged
The report gives no description here.
InformationalCustom division function _divup misbehaves when 0 is divided by 0Acknowledged
The report gives no description here.
InformationalDepegging between the GEM and DAIAcknowledged
The report gives no description here.
InformationalDeprecating the Sky ⇒ MKR path will affect external integratorsAcknowledged
The report gives no description here.
InformationalDonating gem to DssPocket inflates cut()Acknowledged
The report gives no description here.
InformationalDSPC Deployment could finalize authorization rather than waiting for InitAcknowledged
The report gives no description here.
InformationalDSPC module defines DSR and SSR id in upper case while pot and susds are using lower caseAcknowledged
The report gives no description here.
Show 10 more
InformationalFlapper's swap could be sandwichedAcknowledged
The report gives no description here.
InformationalImprovement on the Lift eventAcknowledged
The report gives no description here.
InformationalLaniakea Docs Configurator inconsistenciesAcknowledged
The report gives no description here.
InformationalMinor issues, Typos & DocumentationAcknowledged
The report gives no description here.
InformationalMissing checks in the initialization scripts.Acknowledged
The report gives no description here.
InformationalMissing comment for maxWithdraws functionality in documentationAcknowledged
The report gives no description here.
InformationalMissing comment for maxWithdraws functionality in documentationAcknowledged
The report gives no description here.
InformationalMissing return parameter nameAcknowledged
The report gives no description here.
InformationalMKR mint authorities can be removedAcknowledged
The report gives no description here.
InformationalMultiple buds could cause frontrun issueAcknowledged
The report gives no description here.
Show 10 more
InformationalMutable escrow increases the risk of creating unbacked l2TokensAcknowledged
The report gives no description here.
InformationalMutable escrow increases the risk of creating unbacked l2TokensAcknowledged
The report gives no description here.
InformationalOnly standard ERC20 tokens supportedAcknowledged
The report gives no description here.
Gas OptimizationOracleWrapper can be replaced with an immutable variable within FlappersAcknowledged
The report gives no description here.
InformationalRetroactive identityNetwork changes can lock existing NFAT holdersAcknowledged
The report gives no description here.
InformationalRevert when setting explicit default rateLimits/controller valuesAcknowledged
The report gives no description here.
InformationalRewards duration should always be equal with the hopAcknowledged
The report gives no description here.
InformationalSmall swaps can avoid paying feesAcknowledged
The report gives no description here.
InformationalsNst accumulates DAI dustAcknowledged
The report gives no description here.
Informationaltoc could be initialized in the constructor with block.timestamp to apply the tau delay for the first set callAcknowledged
The report gives no description here.
Show 10 more
Gas OptimizationUniswap pair token order detection can be simplifiedAcknowledged
The report gives no description here.
InformationalUniswap pool migration pulls all liquidity from old poolAcknowledged
The report gives no description here.
InformationalValidate rateLimits_ and controller existence in BeamStateAcknowledged
The report gives no description here.
Informationalyay execution order per slate is non-deterministicAcknowledged
The report gives no description here.
InformationalAlign oapp-evm-upgradeable package version with other LayerZero dependenciesSky: OFT Adapter v2 · Cantina · 4 Sep 2026Fixed
The report gives no description here.
Open the reportInformationalISkyOFTAdapter / ISkyRateLimiter omit the rate-limit and fee viewSky: OFT Adapter v2 · Cantina · 4 Sep 2026Fixed
The report gives no description here.
Open the reportInformationalMinor issues, Typos & DocumentationSky: Avalanche LZ Re-enabling · Cantina · 4 Sep 2026Fixed
The report gives no description here.
Open the reportInformationalChange Event Emitted Even if No ChangeSky OApp OFT · ChainSecurity · 21 Aug 2026Fixed
The report gives no description here.
Open the reportInformationalDirect Burn in Case of No FeesSky OApp OFT · ChainSecurity · 21 Aug 2026Fixed
The report gives no description here.
Open the reportInformationalIncorrect CommentsSky OApp OFT · ChainSecurity · 21 Aug 2026Fixed
The report gives no description here.
Open the reportShow 10 more
InformationalIncorrect Natspec and Redundant Logic _amountCanBeSent/_amountCanBeReceivedSky OApp OFT · ChainSecurity · 21 Aug 2026Fixed
The report gives no description here.
Open the reportInformationalLZGovBridgeForwarder Uses Approve Instead of SafeERC20Sky xchain-helpers · ChainSecurity · 21 Aug 2026Fixed
The report gives no description here.
Open the reportInformationalRedundant ChecksSky OApp OFT · ChainSecurity · 21 Aug 2026Fixed
The report gives no description here.
Open the reportInformationalInstead of using a cached farmOwner in SBEBeam , consider fetching the real owner at run timeSky: SBE Beam · Cantina · 14 Jul 2026Fixed
The report gives no description here.
Open the reportInformationalMinor issues, Typos & DocumentationSky: SBE Beam · Cantina · 14 Jul 2026Fixed
The report gives no description here.
Open the reportInformationalExisting-EID CCIP rewiring can falsely succeed while keeping the old remote adapterSky: LZ Gov DVN Deploy · Cantina · 24 Jun 2026Fixed
The report gives no description here.
Open the reportInformationalMinor issues, Typos & DocumentationSky: LZ Gov DVN Deploy · Cantina · 24 Jun 2026Fixed
The report gives no description here.
Open the reportInformationalSet Worker default multiplier to 10,000 bps during deploymentSky: LZ Gov DVN Deploy · Cantina · 24 Jun 2026Fixed
The report gives no description here.
Open the reportInformationalAutoline ttl Check InconsistencySky DSS Exec Lib · ChainSecurity · 12 Jun 2026Fixed
The report gives no description here.
Open the reportInformationalNatSpec ProblemsSky DSS Exec Lib · ChainSecurity · 12 Jun 2026Fixed
The report gives no description here.
Open the reportShow 10 more
InformationalREADME InaccuraciesSky DSS Exec Lib · ChainSecurity · 12 Jun 2026Fixed
The report gives no description here.
Open the reportInformationalget_kamino_lending_balance could revert if obligation is closedSky: Keel ALM Controller v1. · Cantina · 25 Nov 2025Fixed
The report gives no description here.
Open the reportInformationalMiscellaneous, Documentation, TyposSky: Keel ALM Controller v1. · Cantina · 25 Nov 2025Fixed
The report gives no description here.
Open the reportInformationalThe invoke_signed created by the macro is not inlinedSky: Keel ALM Controller v1. · Cantina · 25 Nov 2025Fixed
The report gives no description here.
Open the reportInformationalcompose_msg function name could be more preciseSky: LZ Solana Token Bridge · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalHaving the Sky Governance OApp creation permissionless is riskySky: LZ Solana Governance · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalimpl From<Instruction> for GovernanceMessage is not usedSky: LZ Solana Governance · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalIncorrect comments in lz_receive_types.rsSky: LZ Solana Token Bridge · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalLzReceiveTypesV2Accounts documentationSky: LZ Solana Governance · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalMinor improvements for a more idiomatic RustSky: LZ Solana Token Bridge · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportShow 10 more
InformationalMinor issues, Typos & DocumentationSky: LZ EVM Token Bridge · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalMissing testsSky: LZ Solana Governance · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalMissing tests for transfer_mint_authoritySky: Migration NTT Manager Solana · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalMixed encoding methods for PDA seeds with TextEncoder.encode() and Buffer.from()Sky: Solana Cross-chain Payloads for LZ Migration · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportInformationaloft_fee does not match actual received fees for mint-and-burn-type adapter and fee-on-transfer tokensSky: LZ Solana Token Bridge · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalOwner check for transfer_mint_authority should be done via constraintSky: Migration NTT Manager Solana · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalRateLimiter variable naming could be more preciseSky: LZ Solana Token Bridge · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalScripts output file name should contain the specific action name and the networkSky: Solana Cross-chain Payloads for LZ Migration · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalSentinel vs. non-sentinel approach on payloadsSky: Solana Cross-chain Payloads for LZ Migration · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalSolana ⇔ EVM quoteOFT OFTLimits discrepancySky: LZ Solana Token Bridge · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportShow 10 more
InformationalUnify multi-network configuration across all scripts and improved payload validationSky: Solana Cross-chain Payloads for LZ Migration · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalUpdate LayerZero dependency to latest lz_receive_types_v2 changesSky: LZ Solana Governance · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalVarious comments and minor issuesSky: Solana Cross-chain Payloads for LZ Migration · Cantina · 28 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalIncorrect README.md flow diagram for star spell whitelistingSky: Star Guard · Cantina · 23 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalplot can replace an already queued spellSky: Star Guard · Cantina · 23 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalAccount Assertions InconsistentSolana Crosschain Governance Payload Scripts · ChainSecurity · 21 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalCode Redundancy in SVM ALM Controller Related ScriptsSolana Crosschain Governance Payload Scripts · ChainSecurity · 21 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalData and Code Are Tightly CoupledSolana Crosschain Governance Payload Scripts · ChainSecurity · 21 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalInconsistent Account ValidationSolana Crosschain Governance Payload Scripts · ChainSecurity · 21 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalIncorrect Check in Kamino InitializationSolana Crosschain Governance Payload Scripts · ChainSecurity · 21 Oct 2025Fixed
The report gives no description here.
Open the reportShow 10 more
InformationalMissing Input Length ValidationSolana Crosschain Governance Payload Scripts · ChainSecurity · 21 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalMissing Surfpool in NETWORK_CONFIGSSolana Crosschain Governance Payload Scripts · ChainSecurity · 21 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalPadding Incorrectly Handled Leading to Script FailureSolana Crosschain Governance Payload Scripts · ChainSecurity · 21 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalSentinel Account Not UsedSolana Crosschain Governance Payload Scripts · ChainSecurity · 21 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalUnchecked Program IDSky Governance OApp · ChainSecurity · 17 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalMinor issues, Typos & DocumentationLockstake: Sky Max Price Oracle · Cantina · 29 Sep 2025Fixed
The report gives no description here.
Open the reportInformationalSpecification MismatchesLockstake Smart Contracts · ChainSecurity · 26 Sep 2025Fixed
The report gives no description here.
Open the reportInformationalUnpermissioned Collateral Top upLockstake Smart Contracts · ChainSecurity · 26 Sep 2025Fixed
The report gives no description here.
Open the reportInformationalDrop on InitStar Guard · ChainSecurity · 4 Sep 2025Fixed
The report gives no description here.
Open the reportInformationalInconsistent Coding StyleStar Guard · ChainSecurity · 4 Sep 2025Fixed
The report gives no description here.
Open the reportShow 10 more
InformationalMisleading comment in LockstakeClipper.kick about triggering bad debt accountingLockstake · Cantina · 18 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalIncorrect SpecificationsSky Rates Converter · ChainSecurity · 15 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalAdd additional deployment verificationFixed
The report gives no description here.
InformationalAdd proper documentation / specFixed
The report gives no description here.
InformationalBroken links in various contractsFixed
The report gives no description here.
InformationalCheck that address contains code before calling itFixed
The report gives no description here.
InformationalCheck that address contains code before calling itFixed
The report gives no description here.
InformationalCheck that address contains code before calling itFixed
The report gives no description here.
InformationalDependence on NstJoin to be the only minter of NstFixed
The report gives no description here.
InformationalDeprecated non-standard ERC20 methods increaseAllowance/decreaseAllowanceFixed
The report gives no description here.
Show 10 more
InformationalDeprecated non-standard ERC20 methods increaseAllowance/decreaseAllowanceFixed
The report gives no description here.
InformationalDeprecated non-standard ERC20 methods increaseAllowance/decreaseAllowanceFixed
The report gives no description here.
InformationalDiscrepancy With NSTFixed
The report gives no description here.
InformationalDocument forced unlimited rate limit behaviorFixed
The report gives no description here.
InformationalDocument why unchecked usage is safeFixed
The report gives no description here.
InformationalDocument why unchecked usage is safeFixed
The report gives no description here.
InformationalDocument why unchecked usage is safeFixed
The report gives no description here.
InformationalDynamic Debt Ceiling MissingFixed
The report gives no description here.
InformationalFill More Than buf PossibleFixed
The report gives no description here.
InformationalGas InefficienciesFixed
The report gives no description here.
Show 10 more
Gas OptimizationHashed salt is unnecessary when creating a new instance of VoteDelegateFixed
The report gives no description here.
InformationalInaccurate NatSpecFixed
The report gives no description here.
InformationalInconsistenciesFixed
The report gives no description here.
InformationalIncorrect CommentFixed
The report gives no description here.
InformationalIncorrect Parameter DescriptionFixed
The report gives no description here.
InformationalInsufficient Sanity Checks in Deployment ScriptsFixed
The report gives no description here.
InformationalIOUs locked in vote delegate instead of sent to userFixed
The report gives no description here.
Gas OptimizationLeft shift operation is cheaper than base two exponentiationFixed
The report gives no description here.
InformationalLockstake migration might bring users closer to liquidationFixed
The report gives no description here.
InformationalmaxChange Cannot Be Below WADFixed
The report gives no description here.
Show 10 more
InformationalMinor issues, Typos & DocumentationFixed
The report gives no description here.
InformationalMinor issues, Typos & DocumentationFixed
The report gives no description here.
InformationalMinor issues, Typos & DocumentationFixed
The report gives no description here.
InformationalMinor issues, Typos & Documentation Context: (See each case below)Fixed
The report gives no description here.
InformationalMinor issues, Typos & Documentation Context: (See each case below)Fixed
The report gives no description here.
InformationalMissing checks in the DssExecLib.sol Context: (See each case below)Fixed
The report gives no description here.
InformationalMissing fee check in the LSEFixed
The report gives no description here.
InformationalMissing parent initializer call in NstFixed
The report gives no description here.
InformationalMissing parent initializer call in SNstFixed
The report gives no description here.
Informationalmsg.value Validation in transferTokenLayerZeroFixed
The report gives no description here.
Show 10 more
InformationalNatSpec inaccuracies for upgradeable proxy interfacesFixed
The report gives no description here.
InformationalNo specific revert message if _cfgs is not set for a rate idFixed
The report gives no description here.
Gas OptimizationNst version check in deployment script can be simplifiedFixed
The report gives no description here.
InformationalOutdated IPot InterfaceFixed
The report gives no description here.
InformationalOutdated TransferFeeConfig comment Context: token_extensions.rs#L24-L25Fixed
The report gives no description here.
InformationalPASInit initialization of setCBeamForRateLimits /setCBeamForControllerFixed
The report gives no description here.
InformationalPAXG Token Used for Tests Does Not Match Actual PAXG ContractFixed
The report gives no description here.
InformationalPrefer encodeCall to encodeWithSelectorFixed
The report gives no description here.
InformationalPrefer encodeCall to encodeWithSelectorFixed
The report gives no description here.
InformationalPrefer encodeCall to encodeWithSelectorFixed
The report gives no description here.
Show 10 more
InformationalPrefer encodeCall to encodeWithSelectorFixed
The report gives no description here.
InformationalRedundant GettersFixed
The report gives no description here.
InformationalRedundant ImportsFixed
The report gives no description here.
InformationalRedundant Initialization ParameterFixed
The report gives no description here.
InformationalRequire error typoFixed
The report gives no description here.
InformationalreserveHatch cooldown might be off-by-oneFixed
The report gives no description here.
Informationalsubscribe() accepts non-members even though issue() later requires identity-network membershipFixed
The report gives no description here.
InformationalThe fee parameter is missing from event emitting within the DepositorUniV3.solFixed
The report gives no description here.
InformationalThe Optimizer Is DisabledFixed
The report gives no description here.
InformationalThere are unused functions in GemLike interfaceFixed
The report gives no description here.
Show 10 more
InformationalTyposFixed
The report gives no description here.
InformationalUnchecked BaseURI at InitializationFixed
The report gives no description here.
InformationalUnnecessary check within the FarmProxyInitFixed
The report gives no description here.
Gas OptimizationUnnecessary custom bitwise negation functionFixed
The report gives no description here.
InformationalUnnecessary STUSDS_MOM-is-ward-on-STUSDS requirement from halt/diss done() checksFixed
The report gives no description here.
InformationalUnpermissioned Repay of Art, Remaining Collateral BalanceFixed
The report gives no description here.
InformationalUnsuitable Parameter SettingsFixed
The report gives no description here.
InformationalUse abi.encodeCall for encoding payloads in TimelockWrappersFixed
The report gives no description here.
InformationalValidating MOM file could be more explicit/clearFixed
The report gives no description here.
InformationalVarious typos within the codebaseFixed
The report gives no description here.
Show 6 more
InformationalVoteDelegate.vote's yays parameter can be calldataFixed
The report gives no description here.
InformationalWrong documentation for L2TokenBridge.finalizeBridgeERC20Fixed
The report gives no description here.
InformationalWrong Error MessageFixed
The report gives no description here.
InformationalWrong l1ToL2Token verification on L2TokenBridgeFixed
The report gives no description here.
InformationalWrong loss caps in Security Model documentationFixed
The report gives no description here.
InformationalWrong README formattingFixed
The report gives no description here.
Contracts1
| Address | Chain | Source code |
|---|---|---|
| 0xdc035d45d973e3ec169d2276ddab16f1e407384f | Chain: Ethereum | Source code: Verified source |
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="sky"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us