VaultCraft security record
As of 30 Oct 2026, VaultCraft has 1 audit report on Trustblock, by Zokyo, dated 31 Dec 2024. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| VaultCraft | Security firm: Zokyo | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · IPFS |
Findings16
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 1 | 0 |
| Medium | 0 | 2 | 4 |
| Low | 0 | 7 | 1 |
HighA vault can be added to OracleVaultController after receiving deposits leading to incorrect priceVaultCraft · Zokyo · 31 Dec 2024Acknowledged
The report gives no description here.
Open the reportMediumFee On Transfer Tokens May Break Virtual Accounting When Withdrawing And DepositingVaultCraft · Zokyo · 31 Dec 2024Acknowledged
The report gives no description here.
Open the reportMediumNo slippage protection can lead to loss of fundsVaultCraft · Zokyo · 31 Dec 2024Acknowledged
The report gives no description here.
Open the reportLowFunctions Across The Targeted Codebase Performs Operations Directly On State Variables Which May Result In Costly TransactionsVaultCraft · Zokyo · 31 Dec 2024Acknowledged
The report gives no description here.
Open the reportLowInternal Functions Should Be Prefixed With _VaultCraft · Zokyo · 31 Dec 2024Acknowledged
The report gives no description here.
Open the reportLowPotential Misconfiguration in setFees FunctionVaultCraft · Zokyo · 31 Dec 2024Acknowledged
The report gives no description here.
Open the reportLowPrices by PushOracle come from a centralized authorityVaultCraft · Zokyo · 31 Dec 2024Acknowledged
The report gives no description here.
Open the reportLowRedundant code and assumptions in tests can introduce bugs in the futureVaultCraft · Zokyo · 31 Dec 2024Acknowledged
The report gives no description here.
Open the reportLowUnbounded Gas Usage in Batch UpdatesVaultCraft · Zokyo · 31 Dec 2024Acknowledged
The report gives no description here.
Open the reportLowUse of Floating Solidity VersionVaultCraft · Zokyo · 31 Dec 2024Acknowledged
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="vaultcraft"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us