As of 30 Oct 2026, Strata has 2 audit reports by 1 security firm on Trustblock; the latest is by Quantstamp, dated 11 Aug 2026. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Strata Markets Update - Isolated and Saturn Strate | Security firm: Quantstamp | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · certificate.quantstamp.com |
| Strata - Discrete Accounting | Security firm: Quantstamp | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · certificate.quantstamp.com |
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 1 | 0 | 7 |
| Low | 0 | 5 | 14 |
The `Tranche` contract calculates newly minted shares before the deposit executes and relies on the composite strategy's reported `depositFeeBps()`, which is always zero. A Midas deposit can subsequently receive less value than supplied because of an underlying fee or accepted slippage, and only this net value is credited to accounting. Because the user already received shares based on the gross value, the resulting NAV reduction is distributed across both the new shares and all existing shares. Existing depositors therefore bear part of a fee caused by the new depositor.
Open the reportThe reports name a repository or files. Open a report to see its scope.
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="strata-1"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us