Tangent security record
As of 10 Nov 2026, Tangent has 1 audit report on Trustblock, by Pashov Audit Group, dated 10 Dec 2025. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Audits2
Newest first
| Report | Security firm | Date | Scope | Critical findings | Source |
|---|---|---|---|---|---|
| Tangent security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Tangent security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
Findings33
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 5 |
| Low | 0 | 7 | 21 |
MediumCurveGaugeMarket does not collect CRV allocation as rewardTangent security review · Pashov Audit Group · 10 Dec 2025Fixed
The report gives no description here.
Open the reportMediumReceipt-token + Zap incorrectly handled in liquidationTangent security review · Pashov Audit Group · 10 Dec 2025Fixed
The report gives no description here.
Open the reportMediumFailure of USDT token supportTangent security review · Pashov Audit Group · 12 Nov 2025Fixed
The report gives no description here.
Open the reportMediumLosses in extreme scenarios due to missing collateral checkTangent security review · Pashov Audit Group · 12 Nov 2025Fixed
The report gives no description here.
Open the reportMediumWaste or unfairness from incorrect reward distributionTangent security review · Pashov Audit Group · 12 Nov 2025Fixed
The report gives no description here.
Open the reportLowDoS in claimUnderlyingRewards due to strict transfer requirements on all reward tokensTangent security review · Pashov Audit Group · 10 Dec 2025Fixed
The report gives no description here.
Open the reportLowMissing events for access control role changesTangent security review · Pashov Audit Group · 10 Dec 2025Fixed
The report gives no description here.
Open the reportLowMissing referrer in StakeDao vault deposit causing lost rewardsTangent security review · Pashov Audit Group · 10 Dec 2025Fixed
The report gives no description here.
Open the reportLowNo check if pool lpToken matches market collateralTokenTangent security review · Pashov Audit Group · 10 Dec 2025Fixed
The report gives no description here.
Open the reportLowPermanent DoS in claimExtraRewards from wrong array input typeTangent security review · Pashov Audit Group · 10 Dec 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowReceipt token handling error in leverageTangent security review · Pashov Audit Group · 10 Dec 2025Fixed
The report gives no description here.
Open the reportLow“No-fail” path may return invalid price if primary fails without fallbackTangent security review · Pashov Audit Group · 12 Nov 2025Fixed
The report gives no description here.
Open the reportLowConflicting liquidation fee limits in MarketCore init and CollateralTangent security review · Pashov Audit Group · 12 Nov 2025Fixed
The report gives no description here.
Open the reportLowCritical setter functions lack event emissions for parameter changesTangent security review · Pashov Audit Group · 12 Nov 2025Fixed
The report gives no description here.
Open the reportLowDivision-by-zero risk in IRCalculator when irParam.pMax equals irParam.pMinTangent security review · Pashov Audit Group · 12 Nov 2025Fixed
The report gives no description here.
Open the reportLowDouble-floor rounding in borrow path slightly favors usersTangent security review · Pashov Audit Group · 12 Nov 2025Fixed
The report gives no description here.
Open the reportLowIncorrect Unit Validation for startCutPriceTangent security review · Pashov Audit Group · 12 Nov 2025Fixed
The report gives no description here.
Open the reportLowKick incentive can round to zero (no motivation to kick small locks)Tangent security review · Pashov Audit Group · 12 Nov 2025Fixed
The report gives no description here.
Open the reportLowMiscalculation of leftover rewards when processRewards is called with zero total supplyTangent security review · Pashov Audit Group · 12 Nov 2025Fixed
The report gives no description here.
Open the reportLowOff-by-one cap prevents setting max allowed liquidation fee in CollateralTangent security review · Pashov Audit Group · 12 Nov 2025Fixed
The report gives no description here.
Open the reportShow 6 more
LowOff-by-one on unlock: == endLockTime cannot unlockTangent security review · Pashov Audit Group · 12 Nov 2025Fixed
The report gives no description here.
Open the reportLowSlippage protection fails during partial liquidationTangent security review · Pashov Audit Group · 12 Nov 2025Fixed
The report gives no description here.
Open the reportLowUnlimited minting in claimRewards() if maxWithdraw() returns maxTangent security review · Pashov Audit Group · 12 Nov 2025Fixed
The report gives no description here.
Open the reportLowWStable mint/burn misused ERC4626 preview functionsTangent security review · Pashov Audit Group · 12 Nov 2025Fixed
The report gives no description here.
Open the reportLowZappingProxy cannot receive ETH refunds resulting in failed zapsTangent security review · Pashov Audit Group · 12 Nov 2025Fixed
The report gives no description here.
Open the reportLowZero repayment risk from rounding in partial liquidationTangent security review · Pashov Audit Group · 12 Nov 2025Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="tangent"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us