The Rig security record
As of 14 Oct 2026, The Rig has 2 audit reports by 1 security firm on Trustblock; the latest is by Oak Security, dated 1 Oct 2025. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Statuses are the security firms’ own. Trustblock does not review code.
Audits2
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| The Rig Updates audit | Security firm: Oak Security | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
| The Rig audit | Security firm: Oak Security | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
Findings33
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 2 | 1 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 6 | 24 |
HighMissing price staleness check may lead to incorrect stFUEL mintingThe Rig audit · Oak Security · 1 Jul 2025Fixed
The report gives no description here.
Open the reportLowBalance increase check ordering can be improvedThe Rig Updates audit · Oak Security · 1 Oct 2025Fixed
The report gives no description here.
Open the reportLowEvent emission flaw leading to a misleading deposited amount in claimThe Rig Updates audit · Oak Security · 1 Oct 2025Fixed
The report gives no description here.
Open the reportLowIncorrect stFUEL to FUEL ratio calculationThe Rig Updates audit · Oak Security · 1 Oct 2025Fixed
The report gives no description here.
Open the reportLowMinimum withdrawal check incorrectly compares stFUEL with FUEL amountThe Rig Updates audit · Oak Security · 1 Oct 2025Fixed
The report gives no description here.
Open the reportLowMisleading fee configuration comment may cause incorrect assumptionsThe Rig Updates audit · Oak Security · 1 Oct 2025Fixed
The report gives no description here.
Open the reportLowMissing initialization check in process_message may allow execution in an uninitialized stateThe Rig Updates audit · Oak Security · 1 Oct 2025Fixed
The report gives no description here.
Open the reportLowMissing supply reduction on burns causes inflated total_supply trackingThe Rig Updates audit · Oak Security · 1 Oct 2025Fixed
The report gives no description here.
Open the reportLowMissing validation allows zero-value withdrawalsThe Rig Updates audit · Oak Security · 1 Oct 2025Fixed
The report gives no description here.
Open the reportLowMissing validation for fuel_unbondedThe Rig Updates audit · Oak Security · 1 Oct 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowRedundant minimum received check can be avoidedThe Rig Updates audit · Oak Security · 1 Oct 2025Fixed
The report gives no description here.
Open the reportLowThe full amount of FUEL to be staked cannot be withdrawn to L1The Rig Updates audit · Oak Security · 1 Oct 2025Fixed
The report gives no description here.
Open the reportLowValidation order can be improved to prevent wasted executionThe Rig Updates audit · Oak Security · 1 Oct 2025Fixed
The report gives no description here.
Open the reportLowIncomplete interface definitionThe Rig audit · Oak Security · 1 Jul 2025Fixed
The report gives no description here.
Open the reportLowInconsistent invariant enforcement enables misconfiguration in the price submission logicThe Rig audit · Oak Security · 1 Jul 2025Fixed
The report gives no description here.
Open the reportLowIncorrect round end timestampThe Rig audit · Oak Security · 1 Jul 2025Fixed
The report gives no description here.
Open the reportLowInteger underflow in the deviation threshold enables DoS for price submissionsThe Rig audit · Oak Security · 1 Jul 2025Fixed
The report gives no description here.
Open the reportLowLack of event emission for the setRigTreasury functionThe Rig audit · Oak Security · 1 Jul 2025Fixed
The report gives no description here.
Open the reportLowLack of initial price validation enables permanent DoS in the price feedThe Rig audit · Oak Security · 1 Jul 2025Fixed
The report gives no description here.
Open the reportLowMark an expired price feed round as failed, regardless of whether the minimum submission count is metThe Rig audit · Oak Security · 1 Jul 2025Fixed
The report gives no description here.
Open the reportShow 5 more
LowMissing address validationThe Rig audit · Oak Security · 1 Jul 2025Fixed
The report gives no description here.
Open the reportLowMissing event emission on pauseThe Rig audit · Oak Security · 1 Jul 2025Fixed
The report gives no description here.
Open the reportLowMissing price feed configuration variable validationThe Rig audit · Oak Security · 1 Jul 2025Fixed
The report gives no description here.
Open the reportLowMissing slippage protection for depositsThe Rig audit · Oak Security · 1 Jul 2025Fixed
The report gives no description here.
Open the reportLowThe withdraw_to_l1_rig function mistakenly refers to stFUEL instead of FUEL tokensThe Rig audit · Oak Security · 1 Jul 2025Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="the-rig"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us