Spool security record
As of 21 Oct 2026, Spool has 10 audit reports by 2 security firms on Trustblock; the latest is by Hexens, dated 2 Sep 2024. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits10
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Spool security review | Security firm: Hexens | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| Spool Ethena Strat And Svb security review | Security firm: Hexens | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Spool Strats security review | Security firm: Hexens | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Spool Metamorpho security review | Security firm: Hexens | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Spool Arbitrum security review | Security firm: Hexens | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Spool security review | Security firm: Hexens | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Spool security review | Security firm: Hexens | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Spool Yield Generator Strategy security review | Security firm: Hexens | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Spool Protocol: Spool audit | Security firm: PeckShield | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Spool Protocol: Spool audit | Security firm: PeckShield | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
Findings36
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 5 |
| Medium | 0 | 2 | 6 |
| Low | 0 | 7 | 15 |
Marked Informational by the firms. Not counted as findings.
InformationalSpoolMulticall.aggregate3() doesn't specify gas for the calls and can be DoSedSpool security review · Hexens · 2 Sep 2024Acknowledged
The report gives no description here.
Open the reportInformational_calculateYieldPercentage function can be simplifiedSpool security review · Hexens · 23 Feb 2024Acknowledged
The report gives no description here.
Open the reportInformationalRedundant safeApprove usageSpool security review · Hexens · 23 Feb 2024Acknowledged
The report gives no description here.
Open the reportInformationalReturn value of lido.submit of isn't checkedSpool security review · Hexens · 26 Jan 2024Acknowledged
The report gives no description here.
Open the reportInformationalCONSTANT AND IMMUTABLE VARIABLES SHOULD BE MARKED AS PRIVATESpool Yield Generator Strategy security review · Hexens · 8 Jan 2024Acknowledged
The report gives no description here.
Open the reportInformationalMulticalls with permitAsset() and permitDai() can be DoSedSpool security review · Hexens · 2 Sep 2024Fixed
The report gives no description here.
Open the reportInformationalencode and decode functions can be optimizedSpool Ethena Strat And Svb security review · Hexens · 14 Jun 2024Fixed
The report gives no description here.
Open the reportInformationalMissing address zero checkSpool Ethena Strat And Svb security review · Hexens · 14 Jun 2024Fixed
The report gives no description here.
Open the reportInformationalNo need of safeApprove usageSpool Ethena Strat And Svb security review · Hexens · 14 Jun 2024Fixed
The report gives no description here.
Open the reportInformational_compound can call _getProtocolRewardsInternalSpool Metamorpho security review · Hexens · 6 May 2024Fixed
The report gives no description here.
Open the reportShow 6 more
InformationalUnused ImportSpool Metamorpho security review · Hexens · 6 May 2024Fixed
The report gives no description here.
Open the reportInformationalUnused import in GammaCamelotStrategySpool Arbitrum security review · Hexens · 26 Apr 2024Fixed
The report gives no description here.
Open the reportInformationalInternal function isn't usedSpool security review · Hexens · 26 Jan 2024Fixed
The report gives no description here.
Open the reportInformationalMissing address zero checkSpool security review · Hexens · 26 Jan 2024Fixed
The report gives no description here.
Open the reportInformationalMissing claim of extra CVX rewardSpool security review · Hexens · 26 Jan 2024Fixed
The report gives no description here.
Open the reportInformationalImproved Logic in AbracadabraMetapoolStrategy/Curve2poolStrategySpool Protocol: Spool audit · PeckShield · 26 Feb 2022Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="spool"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us