Solidly security record
As of 21 Oct 2026, Solidly has 1 audit report on Trustblock, by Cyfrin, dated 24 Jan 2024. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Solidly Audit Report | Security firm: Cyfrin | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
Findings7
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 3 |
| Low | 0 | 2 | 2 |
Marked Gas or Informational by the firms. Not counted as findings.
GasCache storage variables in memory when read multiple times without being changedSolidly Audit Report · Cyfrin · 24 Jan 2024Acknowledged
The report gives no description here.
Open the reportInformationalFunctions not used internally could be marked externalSolidly Audit Report · Cyfrin · 24 Jan 2024Acknowledged
The report gives no description here.
Open the reportGasOptimize away two memory variables in RewardsDistributor::generateLeavesSolidly Audit Report · Cyfrin · 24 Jan 2024Acknowledged
The report gives no description here.
Open the reportGasPrefer ++x to x++Solidly Audit Report · Cyfrin · 24 Jan 2024Acknowledged
The report gives no description here.
Open the reportInformationalPrefer explicit function for renouncing ownership and 2-step ownership transferSolidly Audit Report · Cyfrin · 24 Jan 2024Acknowledged
The report gives no description here.
Open the reportInformationalRefactor hard-coded max pool fee into a constant as it is used in multiple placesSolidly Audit Report · Cyfrin · 24 Jan 2024Acknowledged
The report gives no description here.
Open the reportInformationalrequire and revert statements should have descriptive reason stringsSolidly Audit Report · Cyfrin · 24 Jan 2024Acknowledged
The report gives no description here.
Open the reportInformationalRewardsDistributor::_claimSingle should emit RewardClaimed using amountDeltaSolidly Audit Report · Cyfrin · 24 Jan 2024Acknowledged
The report gives no description here.
Open the reportGasUse multiple requires instead of a single one with multiple statements is better for gas consumptionSolidly Audit Report · Cyfrin · 24 Jan 2024Acknowledged
The report gives no description here.
Open the reportGasCache array length outside of loopSolidly Audit Report · Cyfrin · 24 Jan 2024Fixed
The report gives no description here.
Open the reportShow 4 more
InformationalCollateralWithdrawn and CollateralDeposited events should include relevant amountsSolidly Audit Report · Cyfrin · 24 Jan 2024Fixed
The report gives no description here.
Open the reportGasDon’t initialize variables with default valueSolidly Audit Report · Cyfrin · 24 Jan 2024Fixed
The report gives no description here.
Open the reportInformationalHard-coded pause collateral fee not appropriate for multi-chain usageSolidly Audit Report · Cyfrin · 24 Jan 2024Fixed
The report gives no description here.
Open the reportInformationalRefactor zeroRoot declared in multiple functions into a private constantSolidly Audit Report · Cyfrin · 24 Jan 2024Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="solidly"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us