Tea-Fi security record
As of 21 Oct 2026, Tea-Fi has 4 audit reports by 1 security firm on Trustblock; the latest is by Halborn, dated 31 Oct 2025. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits4
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Paymaster Contracts | Security firm: Halborn | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · halborn.com |
| Noga Fallback Contracts | Security firm: Halborn | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · halborn.com |
| Bridge Contracts | Security firm: Halborn | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · halborn.com |
| Steam-Fi Pre-Vault | Security firm: Halborn | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · halborn.com |
Findings30
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 2 | 7 |
| Low | 0 | 2 | 19 |
Marked Informational by the firms. Not counted as findings.
InformationalpostOp() Failures in Token Transfer are SilentPaymaster Contracts · Halborn · 31 Oct 2025Acknowledged
The report gives no description here.
Open the reportInformationalRebasing Tokens Break Withdrawals (1:1 Model)Bridge Contracts · Halborn · 9 Oct 2025Acknowledged
The report gives no description here.
Open the reportInformationalRotalAssets Excludes Unharvested YieldBridge Contracts · Halborn · 9 Oct 2025Acknowledged
The report gives no description here.
Open the reportInformationalInconsistent Solidity VersionPaymaster Contracts · Halborn · 31 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalTypo in Function Name _valdiatePostOpHandlePaymaster Contracts · Halborn · 31 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalEmergencyWithdrawErc20 Emits Token Addresses Even When No Tokens Are WithdrawnNoga Fallback Contracts · Halborn · 20 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalGas Inefficiency Due to Late Zero Address CheckNoga Fallback Contracts · Halborn · 20 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalMissing unchecked Block in replaceFunctions() Selector LooNoga Fallback Contracts · Halborn · 20 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalsetTreasury() Allows Setting the Same Treasury Address RepeatedlyNoga Fallback Contracts · Halborn · 20 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalUnused Custom ErrorsNoga Fallback Contracts · Halborn · 20 Oct 2025Fixed
The report gives no description here.
Open the reportShow 6 more
InformationalFee Token Mis-Selection Leads to Wrong ETH Fee PaymentBridge Contracts · Halborn · 9 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalFee-on-Transfer Tokens Cause Under-CollateralizationBridge Contracts · Halborn · 9 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalLenient Strategy Validation Can Allow MisconfigurationBridge Contracts · Halborn · 9 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalStrategy Migration Can Strand Funds When totalPrincipal Under ReportsBridge Contracts · Halborn · 9 Oct 2025Fixed
The report gives no description here.
Open the reportInformationalCentralization RiskSteam-Fi Pre-Vault · Halborn · 23 Sep 2025Fixed
The report gives no description here.
Open the reportInformationalRedundant ETH Refund Check in _receiveAssets()Steam-Fi Pre-Vault · Halborn · 23 Sep 2025Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="tea-fi"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us