Sky security record
As of 3 Nov 2026, Sky has 150 audit reports by 3 security firms on Trustblock; the latest is by ChainSecurity, dated 7 Sep 2026. Those reports list no open critical findings. It also holds 1 deployed contract on 1 chain.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Audits150
Newest first
150 audit reports, 77 in Cantina’s series, 68 in ChainSecurity’s series
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| sp-beam | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| lockstake | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Chief Migration Smart Contracts | Security firm: ChainSecurity | Date: | Scope: Repository at commit e4a8204 | No open critical findings | Open · chainsecurity.com |
| chief-migration | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Sky Protocol Token Conversion Audit | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| chief | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Sky Vote Delegate Smart Contract Audit | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| DSS Emergency Spells | Security firm: ChainSecurity | Date: | Scope: Repository at commit bc06eeb | No open critical findings | Open · chainsecurity.com |
| VoteDelegate Smart Contracts | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Protego Smart Contracts | Security firm: ChainSecurity | Date: | Scope: Repository at commit eef9ec0 | No open critical findings | Open · chainsecurity.com |
| Sky SP-BEAM Module | Security firm: ChainSecurity | Date: | Scope: Repository at commit 4e7a435 | No open critical findings | Open · chainsecurity.com |
| Chief Smart Contracts | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Sky DSS Blow2 | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Endgame Toolkit Deployment Scripts | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Original removed |
| MakerDAO DSS Vest | Security firm: ChainSecurity | Date: | Scope: Repository at commit 41728f0 | No open critical findings | Open · chainsecurity.com |
| MakerDAO OP Token Bridge Audit Report | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| MakerDAO Arbitrum Token Bridge Audit | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| OP Token Bridge | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Arbitrum Token Bridge | Security firm: ChainSecurity | Date: | Scope: Repository at commit 6248966 | No open critical findings | Open · chainsecurity.com |
| USDS Smart Contracts | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| MakerDAO Sky Deployment Scripts | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| MakerDAO Savings USDS | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| sky | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| sdao | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| susds | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
Findings204
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 0 | 6 |
| Medium | 2 | 5 | 17 |
| Low | 6 | 59 | 107 |
Marked Informational or Gas Optimization by the firms. Not counted as findings.
InformationalActivating SSROracle can change CCIPDVNAdapter allowlist semanticsSky: LZ SSR Oracle Init · Cantina · 4 Sep 2026Acknowledged
The report gives no description here.
Open the reportInformationalAvoid LayerZero uint32.max / READ_CHANNEL_1 collision for sentinel IDSky: OFT Adapter v2 · Cantina · 4 Sep 2026Acknowledged
The report gives no description here.
Open the reportInformationalLZGovBridgeReceiver public getters can swallow a payload whose selector collidesSky: Stars LZ Governance · Cantina · 4 Sep 2026Acknowledged
The report gives no description here.
Open the reportInformationalmigrateAvax opens the L1 OFT before the Avalanche adapter can mintSky: Avalanche LZ Re-enabling · Cantina · 4 Sep 2026Acknowledged
The report gives no description here.
Open the reportInformationalMinor issues, Typos & DocumentationSky: Stars LZ Governance · Cantina · 4 Sep 2026Acknowledged
The report gives no description here.
Open the reportInformationalMinor issues, Typos & DocumentationSky: OFT Adapter v2 · Cantina · 4 Sep 2026Acknowledged
The report gives no description here.
Open the reportInformationalReturn zero quote limits for SENTINEL_EIDSky: OFT Adapter v2 · Cantina · 4 Sep 2026Acknowledged
The report gives no description here.
Open the reportInformationalSSR activation accepts an executor message limit below the required payload sizeSky: LZ SSR Oracle Init · Cantina · 4 Sep 2026Acknowledged
The report gives no description here.
Open the reportInformationalMinor issues, Typos & DocumentationSky: PAS configurator-unit · Cantina · 11 Aug 2026Acknowledged
The report gives no description here.
Open the reportInformationalPASInit.pauseTimelock can remove an existing pauserSky: PAS configurator-unit · Cantina · 11 Aug 2026Acknowledged
The report gives no description here.
Open the reportShow 10 more
InformationalHalo issue rate-limit key omits the facility gemSky: PAU NFAT Facet · Cantina · 6 Jul 2026Acknowledged
The report gives no description here.
Open the reportInformationalMinor issues, Typos & DocumentationSky: PAU NFAT Facet · Cantina · 6 Jul 2026Acknowledged
The report gives no description here.
Open the reportInformationalPAU cannot transfer NFTsSky: PAU NFAT Facet · Cantina · 6 Jul 2026Acknowledged
The report gives no description here.
Open the reportInformationalDVNBroadcaster should explicitly reject malformed packet header lengthsSky: LZ DVN Broadcaster · Cantina · 25 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalAvoid bidirectional setup for one-way Sky Gov bridgeSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalCCIP adapter pauser does not pause any CCIP adapter flowSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalCCIP service limits can revert adapter sendsSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalCCIPDVNAdapter normalizes endpoint ids and aliases v1/v2 route configurationSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalCCIPDVNAdapter reverts on any DVN-targeted optionSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalCCIPDVNAdapterFeeLib ignores configured floorMarginUSDSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportShow 10 more
InformationalDVN adapter vs OApp receive library misconfigurationSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalDVN fees can be discounted below cost breaking bridging longtermSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalImplicit fee quote assumption on message byte contentsSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalMinor issues, Typos & DocumentationSky: CCIP DVN Adapter · Cantina · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalDeploy script does not check that admin is not address(0)PAU: Diamond PAU Deployment Scripts & Deployment R · Cantina · 10 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalMakefile deploy targets can run with wrong config and leave partial deploymentsPAU: Diamond PAU Deployment Scripts & Deployment R · Cantina · 10 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalMissing view from quoteTransferPAU: Diamond PAU Deployment Scripts & Deployment R · Cantina · 10 Jun 2026Acknowledged
The report gives no description here.
Open the reportInformationalAn ilk collateral can't have the names DSR or SSR for the DSPC module to work correctlysp-beam · Cantina · 2 May 2025Acknowledged
The report gives no description here.
Open the reportInformationalDSPC Deployment could finalize authorization rather than waiting for Initsp-beam · Cantina · 2 May 2025Acknowledged
The report gives no description here.
Open the reportInformationalDSPC module defines DSR and SSR id in upper case while pot and susds are using lower casesp-beam · Cantina · 2 May 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
InformationalMultiple buds could cause frontrun issuesp-beam · Cantina · 2 May 2025Acknowledged
The report gives no description here.
Open the reportInformationaltoc could be initialized in the constructor with block.timestamp to apply the tau delay for the first set callsp-beam · Cantina · 2 May 2025Acknowledged
The report gives no description here.
Open the reportInformationalDeprecating the Sky ⇒ MKR path will affect external integratorsSky Protocol Token Conversion Audit · Cantina · 30 Apr 2025Acknowledged
The report gives no description here.
Open the reportInformationalImprovement on the Lift eventchief · Cantina · 30 Apr 2025Acknowledged
The report gives no description here.
Open the reportInformationalMissing return parameter namechief · Cantina · 30 Apr 2025Acknowledged
The report gives no description here.
Open the reportInformationalMKR mint authorities can be removedSky Protocol Token Conversion Audit · Cantina · 30 Apr 2025Acknowledged
The report gives no description here.
Open the reportInformationalyay execution order per slate is non-deterministicchief · Cantina · 30 Apr 2025Acknowledged
The report gives no description here.
Open the reportInformationalMissing comment for maxWithdraws functionality in documentationMakerDAO OP Token Bridge Audit Report · Cantina · 23 Oct 2024Acknowledged
The report gives no description here.
Open the reportInformationalMissing comment for maxWithdraws functionality in documentationMakerDAO Arbitrum Token Bridge Audit · Cantina · 23 Oct 2024Acknowledged
The report gives no description here.
Open the reportInformationalMutable escrow increases the risk of creating unbacked l2TokensMakerDAO OP Token Bridge Audit Report · Cantina · 23 Oct 2024Acknowledged
The report gives no description here.
Open the reportShow 10 more
InformationalMutable escrow increases the risk of creating unbacked l2TokensMakerDAO Arbitrum Token Bridge Audit · Cantina · 23 Oct 2024Acknowledged
The report gives no description here.
Open the reportInformational_update doesn't validate the identityNetwork membership of the transfer initiatorAcknowledged
The report gives no description here.
InformationalAdding a whenPaused modifier and an event to NttManager.migrateLockedTokensAcknowledged
The report gives no description here.
InformationaladdInitControllerActions requires full call parameter specification leading to potential aBEAM operational overheadAcknowledged
The report gives no description here.
InformationalAdditional verification checks for bridge farm scriptsAcknowledged
The report gives no description here.
InformationalAllow unlimited maxAmount regardless of slope in Configurator rate limit setupAcknowledged
The report gives no description here.
InformationalArranger has full control over deposited fundsAcknowledged
The report gives no description here.
InformationalAsymmetric fee structureAcknowledged
The report gives no description here.
InformationalAsync state between EVM ⇔ SOL bridge during the migrationAcknowledged
The report gives no description here.
InformationalAsync state between EVM ⇔ SOL bridge during the migrationAcknowledged
The report gives no description here.
Show 10 more
Informationalcompute_fee_and_adjust_amount fee computations not aligned with EVM and can be optimizedAcknowledged
The report gives no description here.
InformationalCustom division function _divup misbehaves when 0 is divided by 0Acknowledged
The report gives no description here.
InformationalDepegging between the GEM and DAIAcknowledged
The report gives no description here.
InformationalDonating gem to DssPocket inflates cut()Acknowledged
The report gives no description here.
InformationalFlapper's swap could be sandwichedAcknowledged
The report gives no description here.
InformationalKamino klend referral rewards cannot be claimedAcknowledged
The report gives no description here.
InformationalLaniakea Docs Configurator inconsistenciesAcknowledged
The report gives no description here.
InformationalmaxDelay can be set to zero allowing execution only in the same block as the plot callAcknowledged
The report gives no description here.
InformationalMinor issues, Typos & DocumentationAcknowledged
The report gives no description here.
InformationalMismatch between main functions and the preview*() counterpart behaviour when chi == 0Acknowledged
The report gives no description here.
Show 10 more
InformationalMissing checks in the initialization scripts.Acknowledged
The report gives no description here.
InformationalMissing paused activation in migration plan for Ethereum and Solana NTTAcknowledged
The report gives no description here.
InformationalMissing paused activation in migration plan for Ethereum and Solana NTTAcknowledged
The report gives no description here.
InformationalMixed usage of DAI and USDS in commentsAcknowledged
The report gives no description here.
InformationalNot all instruction from lz_receive_types_v2 are required to be executedAcknowledged
The report gives no description here.
InformationalNot forwarding remaining_accounts to initialize_user could result in revert on DriftAcknowledged
The report gives no description here.
InformationalOnly standard ERC20 tokens supportedAcknowledged
The report gives no description here.
Gas OptimizationOracleWrapper can be replaced with an immutable variable within FlappersAcknowledged
The report gives no description here.
InformationalPayable SubProxy.exec is not supported by StarGuardAcknowledged
The report gives no description here.
InformationalRequire paused state before calling transfer_mint_authorityAcknowledged
The report gives no description here.
Show 10 more
InformationalRetroactive identityNetwork changes can lock existing NFAT holdersAcknowledged
The report gives no description here.
InformationalRevert when setting explicit default rateLimits/controller valuesAcknowledged
The report gives no description here.
InformationalRewards duration should always be equal with the hopAcknowledged
The report gives no description here.
InformationalSmall swaps can avoid paying feesAcknowledged
The report gives no description here.
InformationalsNst accumulates DAI dustAcknowledged
The report gives no description here.
InformationalStarGuard can't deny itself on the subProxy in case of a StarGuard migration eventAcknowledged
The report gives no description here.
InformationalStarGuard.exec doesn't returned bytes memory out from subProxy.execAcknowledged
The report gives no description here.
InformationalStoring pool_id in Drift IntegrationConfig might not be necessaryAcknowledged
The report gives no description here.
InformationalThe current design does not offer multiple spells for the same SubProxyAcknowledged
The report gives no description here.
InformationalUnchecked target on destination chain could be used to manage GovernanceOAppReceiver's LZ configurationAcknowledged
The report gives no description here.
Show 10 more
Gas OptimizationUniswap pair token order detection can be simplifiedAcknowledged
The report gives no description here.
InformationalUniswap pool migration pulls all liquidity from old poolAcknowledged
The report gives no description here.
InformationalUsing custom error like TransfersDisabled instead of removing the NttManager.transferAcknowledged
The report gives no description here.
InformationalValidate rateLimits_ and controller existence in BeamStateAcknowledged
The report gives no description here.
InformationalAlign oapp-evm-upgradeable package version with other LayerZero dependenciesSky: OFT Adapter v2 · Cantina · 4 Sep 2026Fixed
The report gives no description here.
Open the reportInformationalISkyOFTAdapter / ISkyRateLimiter omit the rate-limit and fee viewSky: OFT Adapter v2 · Cantina · 4 Sep 2026Fixed
The report gives no description here.
Open the reportInformationalMinor issues, Typos & DocumentationSky: Avalanche LZ Re-enabling · Cantina · 4 Sep 2026Fixed
The report gives no description here.
Open the reportInformationalChange Event Emitted Even if No ChangeSky OApp OFT · ChainSecurity · 21 Aug 2026Fixed
The report gives no description here.
Open the reportInformationalDirect Burn in Case of No FeesSky OApp OFT · ChainSecurity · 21 Aug 2026Fixed
The report gives no description here.
Open the reportInformationalIncorrect CommentsSky OApp OFT · ChainSecurity · 21 Aug 2026Fixed
The report gives no description here.
Open the reportShow 10 more
InformationalIncorrect Natspec and Redundant Logic _amountCanBeSent/_amountCanBeReceivedSky OApp OFT · ChainSecurity · 21 Aug 2026Fixed
The report gives no description here.
Open the reportInformationalLZGovBridgeForwarder Uses Approve Instead of SafeERC20Sky xchain-helpers · ChainSecurity · 21 Aug 2026Fixed
The report gives no description here.
Open the reportInformationalRedundant ChecksSky OApp OFT · ChainSecurity · 21 Aug 2026Fixed
The report gives no description here.
Open the reportInformationalInstead of using a cached farmOwner in SBEBeam , consider fetching the real owner at run timeSky: SBE Beam · Cantina · 14 Jul 2026Fixed
The report gives no description here.
Open the reportInformationalMinor issues, Typos & DocumentationSky: SBE Beam · Cantina · 14 Jul 2026Fixed
The report gives no description here.
Open the reportInformationalExisting-EID CCIP rewiring can falsely succeed while keeping the old remote adapterSky: LZ Gov DVN Deploy · Cantina · 24 Jun 2026Fixed
The report gives no description here.
Open the reportInformationalMinor issues, Typos & DocumentationSky: LZ Gov DVN Deploy · Cantina · 24 Jun 2026Fixed
The report gives no description here.
Open the reportInformationalSet Worker default multiplier to 10,000 bps during deploymentSky: LZ Gov DVN Deploy · Cantina · 24 Jun 2026Fixed
The report gives no description here.
Open the reportInformationalAutoline ttl Check InconsistencySky DSS Exec Lib · ChainSecurity · 12 Jun 2026Fixed
The report gives no description here.
Open the reportInformationalNatSpec ProblemsSky DSS Exec Lib · ChainSecurity · 12 Jun 2026Fixed
The report gives no description here.
Open the reportShow 10 more
InformationalREADME InaccuraciesSky DSS Exec Lib · ChainSecurity · 12 Jun 2026Fixed
The report gives no description here.
Open the reportInformationalNo specific revert message if _cfgs is not set for a rate idsp-beam · Cantina · 2 May 2025Fixed
The report gives no description here.
Open the reportInformationalValidating MOM file could be more explicit/clearsp-beam · Cantina · 2 May 2025Fixed
The report gives no description here.
Open the reportInformationalLockstake migration might bring users closer to liquidationlockstake · Cantina · 1 May 2025Fixed
The report gives no description here.
Open the reportInformationalMissing fee check in the LSElockstake · Cantina · 1 May 2025Fixed
The report gives no description here.
Open the reportInformationalWrong README formattinglockstake · Cantina · 1 May 2025Fixed
The report gives no description here.
Open the reportInformationalVoteDelegate.vote's yays parameter can be calldataSky Vote Delegate Smart Contract Audit · Cantina · 30 Apr 2025Fixed
The report gives no description here.
Open the reportInformationalIncorrect Parameter DescriptionDSS Emergency Spells · ChainSecurity · 25 Apr 2025Fixed
The report gives no description here.
Open the reportInformationalInaccurate NatSpecProtego Smart Contracts · ChainSecurity · 15 Apr 2025Fixed
The report gives no description here.
Open the reportInformationalUnsuitable Parameter SettingsSky SP-BEAM Module · ChainSecurity · 31 Mar 2025Fixed
The report gives no description here.
Open the reportShow 10 more
InformationalRedundant ImportsEndgame Toolkit Deployment Scripts · ChainSecurity · 12 Dec 2024Fixed
The report gives no description here.
Open the reportInformationalRedundant Initialization ParameterArbitrum Token Bridge · ChainSecurity · 9 Oct 2024Fixed
The report gives no description here.
Open the reportInformationalDiscrepancy With NSTMakerDAO Savings USDS · ChainSecurity · 30 Sep 2024Fixed
The report gives no description here.
Open the reportInformationalAccount Assertions InconsistentFixed
The report gives no description here.
InformationalAdd additional deployment verificationFixed
The report gives no description here.
InformationalAdd proper documentation / specFixed
The report gives no description here.
InformationalBroken links in various contractsFixed
The report gives no description here.
InformationalCheck that address contains code before calling itFixed
The report gives no description here.
InformationalCheck that address contains code before calling itFixed
The report gives no description here.
InformationalCheck that address contains code before calling itFixed
The report gives no description here.
Show 10 more
InformationalCode Redundancy in SVM ALM Controller Related ScriptsFixed
The report gives no description here.
Informationalcompose_msg function name could be more preciseFixed
The report gives no description here.
InformationalData and Code Are Tightly CoupledFixed
The report gives no description here.
InformationalDependence on NstJoin to be the only minter of NstFixed
The report gives no description here.
InformationalDeprecated non-standard ERC20 methods increaseAllowance/decreaseAllowanceFixed
The report gives no description here.
InformationalDeprecated non-standard ERC20 methods increaseAllowance/decreaseAllowanceFixed
The report gives no description here.
InformationalDeprecated non-standard ERC20 methods increaseAllowance/decreaseAllowanceFixed
The report gives no description here.
InformationalDocument forced unlimited rate limit behaviorFixed
The report gives no description here.
InformationalDocument why unchecked usage is safeFixed
The report gives no description here.
InformationalDocument why unchecked usage is safeFixed
The report gives no description here.
Show 10 more
InformationalDocument why unchecked usage is safeFixed
The report gives no description here.
InformationalDrop on InitFixed
The report gives no description here.
InformationalDynamic Debt Ceiling MissingFixed
The report gives no description here.
InformationalFill More Than buf PossibleFixed
The report gives no description here.
InformationalGas InefficienciesFixed
The report gives no description here.
Informationalget_kamino_lending_balance could revert if obligation is closedFixed
The report gives no description here.
Gas OptimizationHashed salt is unnecessary when creating a new instance of VoteDelegateFixed
The report gives no description here.
InformationalHaving the Sky Governance OApp creation permissionless is riskyFixed
The report gives no description here.
Informationalimpl From<Instruction> for GovernanceMessage is not usedFixed
The report gives no description here.
InformationalInconsistenciesFixed
The report gives no description here.
Show 10 more
InformationalInconsistent Account ValidationFixed
The report gives no description here.
InformationalInconsistent Coding StyleFixed
The report gives no description here.
InformationalIncorrect Check in Kamino InitializationFixed
The report gives no description here.
InformationalIncorrect CommentFixed
The report gives no description here.
InformationalIncorrect comments in lz_receive_types.rsFixed
The report gives no description here.
InformationalIncorrect README.md flow diagram for star spell whitelistingFixed
The report gives no description here.
InformationalIncorrect SpecificationsFixed
The report gives no description here.
InformationalInsufficient Sanity Checks in Deployment ScriptsFixed
The report gives no description here.
InformationalIOUs locked in vote delegate instead of sent to userFixed
The report gives no description here.
Gas OptimizationLeft shift operation is cheaper than base two exponentiationFixed
The report gives no description here.
Show 10 more
InformationalLzReceiveTypesV2Accounts documentationFixed
The report gives no description here.
InformationalmaxChange Cannot Be Below WADFixed
The report gives no description here.
InformationalMinor improvements for a more idiomatic RustFixed
The report gives no description here.
InformationalMinor issues, Typos & DocumentationFixed
The report gives no description here.
InformationalMinor issues, Typos & DocumentationFixed
The report gives no description here.
InformationalMinor issues, Typos & DocumentationFixed
The report gives no description here.
InformationalMinor issues, Typos & DocumentationFixed
The report gives no description here.
InformationalMinor issues, Typos & DocumentationFixed
The report gives no description here.
InformationalMinor issues, Typos & Documentation Context: (See each case below)Fixed
The report gives no description here.
InformationalMinor issues, Typos & Documentation Context: (See each case below)Fixed
The report gives no description here.
Show 10 more
InformationalMiscellaneous, Documentation, TyposFixed
The report gives no description here.
InformationalMisleading comment in LockstakeClipper.kick about triggering bad debt accountingFixed
The report gives no description here.
InformationalMissing checks in the DssExecLib.sol Context: (See each case below)Fixed
The report gives no description here.
InformationalMissing Input Length ValidationFixed
The report gives no description here.
InformationalMissing parent initializer call in NstFixed
The report gives no description here.
InformationalMissing parent initializer call in SNstFixed
The report gives no description here.
InformationalMissing Surfpool in NETWORK_CONFIGSFixed
The report gives no description here.
InformationalMissing testsFixed
The report gives no description here.
InformationalMissing tests for transfer_mint_authorityFixed
The report gives no description here.
InformationalMixed encoding methods for PDA seeds with TextEncoder.encode() and Buffer.from()Fixed
The report gives no description here.
Show 10 more
Informationalmsg.value Validation in transferTokenLayerZeroFixed
The report gives no description here.
InformationalNatSpec inaccuracies for upgradeable proxy interfacesFixed
The report gives no description here.
Gas OptimizationNst version check in deployment script can be simplifiedFixed
The report gives no description here.
Informationaloft_fee does not match actual received fees for mint-and-burn-type adapter and fee-on-transfer tokensFixed
The report gives no description here.
InformationalOutdated IPot InterfaceFixed
The report gives no description here.
InformationalOutdated TransferFeeConfig comment Context: token_extensions.rs#L24-L25Fixed
The report gives no description here.
InformationalOwner check for transfer_mint_authority should be done via constraintFixed
The report gives no description here.
InformationalPadding Incorrectly Handled Leading to Script FailureFixed
The report gives no description here.
InformationalPASInit initialization of setCBeamForRateLimits /setCBeamForControllerFixed
The report gives no description here.
InformationalPAXG Token Used for Tests Does Not Match Actual PAXG ContractFixed
The report gives no description here.
Show 10 more
Informationalplot can replace an already queued spellFixed
The report gives no description here.
InformationalPrefer encodeCall to encodeWithSelectorFixed
The report gives no description here.
InformationalPrefer encodeCall to encodeWithSelectorFixed
The report gives no description here.
InformationalPrefer encodeCall to encodeWithSelectorFixed
The report gives no description here.
InformationalPrefer encodeCall to encodeWithSelectorFixed
The report gives no description here.
InformationalRateLimiter variable naming could be more preciseFixed
The report gives no description here.
InformationalRedundant GettersFixed
The report gives no description here.
InformationalRequire error typoFixed
The report gives no description here.
InformationalreserveHatch cooldown might be off-by-oneFixed
The report gives no description here.
InformationalScripts output file name should contain the specific action name and the networkFixed
The report gives no description here.
Show 10 more
InformationalSentinel Account Not UsedFixed
The report gives no description here.
InformationalSentinel vs. non-sentinel approach on payloadsFixed
The report gives no description here.
InformationalSolana ⇔ EVM quoteOFT OFTLimits discrepancyFixed
The report gives no description here.
InformationalSpecification MismatchesFixed
The report gives no description here.
Informationalsubscribe() accepts non-members even though issue() later requires identity-network membershipFixed
The report gives no description here.
InformationalThe fee parameter is missing from event emitting within the DepositorUniV3.solFixed
The report gives no description here.
InformationalThe invoke_signed created by the macro is not inlinedFixed
The report gives no description here.
InformationalThe Optimizer Is DisabledFixed
The report gives no description here.
InformationalThere are unused functions in GemLike interfaceFixed
The report gives no description here.
InformationalTyposFixed
The report gives no description here.
Show 10 more
InformationalUnchecked BaseURI at InitializationFixed
The report gives no description here.
InformationalUnchecked Program IDFixed
The report gives no description here.
InformationalUnify multi-network configuration across all scripts and improved payload validationFixed
The report gives no description here.
InformationalUnnecessary check within the FarmProxyInitFixed
The report gives no description here.
Gas OptimizationUnnecessary custom bitwise negation functionFixed
The report gives no description here.
InformationalUnnecessary STUSDS_MOM-is-ward-on-STUSDS requirement from halt/diss done() checksFixed
The report gives no description here.
InformationalUnpermissioned Collateral Top upFixed
The report gives no description here.
InformationalUnpermissioned Repay of Art, Remaining Collateral BalanceFixed
The report gives no description here.
InformationalUpdate LayerZero dependency to latest lz_receive_types_v2 changesFixed
The report gives no description here.
InformationalUse abi.encodeCall for encoding payloads in TimelockWrappersFixed
The report gives no description here.
Show 6 more
InformationalVarious comments and minor issuesFixed
The report gives no description here.
InformationalVarious typos within the codebaseFixed
The report gives no description here.
InformationalWrong documentation for L2TokenBridge.finalizeBridgeERC20Fixed
The report gives no description here.
InformationalWrong Error MessageFixed
The report gives no description here.
InformationalWrong l1ToL2Token verification on L2TokenBridgeFixed
The report gives no description here.
InformationalWrong loss caps in Security Model documentationFixed
The report gives no description here.
Contracts1
| Address | Chain | Source code |
|---|---|---|
| 0xdc035d45d973e3ec169d2276ddab16f1e407384f | Chain: Ethereum | Source code: Verified source |
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="sky"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us