Veda security record
As of 14 Oct 2026, Veda has 2 audit reports by 1 security firm on Trustblock; the latest is by Certora, dated 27 Apr 2026. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Statuses are the security firms’ own. Trustblock does not review code.
Audits2
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Veda Yield Streaming | Security firm: Certora | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
| Veda Incentive Teller System | Security firm: Certora | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
Findings17
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 1 | 1 |
| Low | 0 | 14 | 1 |
MediumWhen solving a boring queue withdrawal, the checkpointed withdraw value is over/under estimated due to using the wrong rateVeda Incentive Teller System · Certora · 21 Apr 2026Acknowledged
The report gives no description here.
Open the reportLowA large deposit prior to posting a loss can result in losses larger than 1% of the current supply which don’t pause the protocolVeda Yield Streaming · Certora · 27 Apr 2026Acknowledged
The report gives no description here.
Open the reportLowInconsistent style on postLoss()Veda Yield Streaming · Certora · 27 Apr 2026Acknowledged
The report gives no description here.
Open the reportLowpostLoss() calls can truncate already vested small amounts of assets, potentially compounding into bigger lossesVeda Yield Streaming · Certora · 27 Apr 2026Acknowledged
The report gives no description here.
Open the reportLowSupplyObservation.cumulativeSupply might eventually overflowVeda Yield Streaming · Certora · 27 Apr 2026Acknowledged
The report gives no description here.
Open the reportLowUsers can avoid losses by frontrunning postLoss() with a withdrawalVeda Yield Streaming · Certora · 27 Apr 2026Acknowledged
The report gives no description here.
Open the reportLowVirtual calculation of fees based on current supply may result in the “over-calculation” of the accumulated fees resulting in less vested yieldVeda Yield Streaming · Certora · 27 Apr 2026Acknowledged
The report gives no description here.
Open the reportLowBridge compliance check doesn’t include destination / bridgeWildCardVeda Incentive Teller System · Certora · 21 Apr 2026Acknowledged
The report gives no description here.
Open the reportLowBridged mints bypass normal teller-side deposit checks on the destination chainVeda Incentive Teller System · Certora · 21 Apr 2026Acknowledged
The report gives no description here.
Open the reportLowdepositAndBridge always reverts when share locking is enabledVeda Incentive Teller System · Certora · 21 Apr 2026Acknowledged
The report gives no description here.
Open the reportShow 5 more
LowPayable functions don't consume ETHVeda Incentive Teller System · Certora · 21 Apr 2026Acknowledged
The report gives no description here.
Open the reportLowrefundDeposit saves the current rate when updating checkpoints, rather than the rate at time of the depositVeda Incentive Teller System · Certora · 21 Apr 2026Acknowledged
The report gives no description here.
Open the reportLowSolmate is being softly deprecated, and no longer actively maintainedVeda Incentive Teller System · Certora · 21 Apr 2026Acknowledged
The report gives no description here.
Open the reportLowUsers can grief rescueTokens() by temporarily changing queue stateVeda Incentive Teller System · Certora · 21 Apr 2026Acknowledged
The report gives no description here.
Open the reportLowWhenever reward checkpointing is enabled, P2P transfers and routing should be disabledVeda Incentive Teller System · Certora · 21 Apr 2026Acknowledged
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="veda"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us