Velodrome Finance security record
As of 30 Oct 2026, Velodrome Finance has 8 audit reports by 1 security firm on Trustblock; the latest is by ChainSecurity, dated 30 Jun 2025. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits8
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Verified ERC20 | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Velodrome Superswap Router | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Velodrome Superchain Interoperability | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Velodrome Sink Gauge v2 | Security firm: ChainSecurity | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · chainsecurity.com |
| Slipstream Dynamic Fee | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Epoch Governor | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Superchain Slipstream | Security firm: ChainSecurity | Date: | Scope: Files named in the report | 1 critical finding, fixed | Open · chainsecurity.com |
| Superchain diff | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
Findings29
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 4 |
| Medium | 0 | 0 | 8 |
| Low | 0 | 4 | 12 |
CriticalincreaseLiquidity() for NFT Owned by Gauge Breaks Accounting of LiquiditySuperchain Slipstream · ChainSecurity · 13 Nov 2024Fixed
The report gives no description here.
Open the reportHighRootMessageBridge.sendMessage() Reverts if InterchainGasPaymaster Is UsedVelodrome Superchain Interoperability · ChainSecurity · 20 May 2025Fixed
The report gives no description here.
Open the reportHighVoting Power Can Be Temporarily Artificially InflatedVelodrome Superchain Interoperability · ChainSecurity · 20 May 2025Fixed
The report gives no description here.
Open the reportHighArbitrary Payload in execute()Epoch Governor · ChainSecurity · 13 Jan 2025Fixed
The report gives no description here.
Open the reportHighRootCLPoolFactory Does Not Support Pools With Same Parameters on Different ChainsSuperchain Slipstream · ChainSecurity · 13 Nov 2024Fixed
The report gives no description here.
Open the reportMediumArbitrary Approval Can Be Obtained From the RouterVelodrome Superswap Router · ChainSecurity · 30 Jun 2025Fixed
The report gives no description here.
Open the reportMediumIncorrect AmountIn Calculation Causes Swap Failures With Uniswap V2Velodrome Superswap Router · ChainSecurity · 30 Jun 2025Fixed
The report gives no description here.
Open the reportMediumVoting Period in Epochs Can Be Bypassed by Using poke()Velodrome Superchain Interoperability · ChainSecurity · 20 May 2025Fixed
The report gives no description here.
Open the reportMediumDynamic Fee Depends on the Price ValueSlipstream Dynamic Fee · ChainSecurity · 13 Jan 2025Fixed
The report gives no description here.
Open the reportMediumMissing Checks in propose()Epoch Governor · ChainSecurity · 13 Jan 2025Fixed
The report gives no description here.
Open the reportShow 10 more
MediumSignature Does Not Include tokenIdEpoch Governor · ChainSecurity · 13 Jan 2025Fixed
The report gives no description here.
Open the reportMediumGas Limit of createGauge on Leaf Chain Incompatible With SlipstreamSuperchain Slipstream · ChainSecurity · 13 Nov 2024Fixed
The report gives no description here.
Open the reportMediumNonFungiblePositionManager Can Return Incorrect Lists of User PositionsSuperchain Slipstream · ChainSecurity · 13 Nov 2024Fixed
The report gives no description here.
Open the reportLowdeployXERC20WithLockbox() in XERC20Factory Can Be FrontrunVelodrome Superchain Interoperability · ChainSecurity · 20 May 2025Fixed
The report gives no description here.
Open the reportLowKilling and Reviving Leaf-Chain GaugesVelodrome Superchain Interoperability · ChainSecurity · 20 May 2025Fixed
The report gives no description here.
Open the reportLow_countVote() Can Revert With Incorrect Error MessageEpoch Governor · ChainSecurity · 13 Jan 2025Fixed
The report gives no description here.
Open the reportLowDynamic Fee Is Ignored When Tick Is 0Slipstream Dynamic Fee · ChainSecurity · 13 Jan 2025Fixed
The report gives no description here.
Open the reportLowgetVotes() Uses Past Timestamp With Current OwnerEpoch Governor · ChainSecurity · 13 Jan 2025Fixed
The report gives no description here.
Open the reportLowIncorrect supportsInterface() ResultEpoch Governor · ChainSecurity · 13 Jan 2025Fixed
The report gives no description here.
Open the reportLowMissing Checks in ConstructorSlipstream Dynamic Fee · ChainSecurity · 13 Jan 2025Fixed
The report gives no description here.
Open the reportShow 5 more
LowMissing Event Emission in ConstructorSlipstream Dynamic Fee · ChainSecurity · 13 Jan 2025Fixed
The report gives no description here.
Open the reportLowVote Duration Is Two Seconds Too LongEpoch Governor · ChainSecurity · 13 Jan 2025Fixed
The report gives no description here.
Open the reportLowvotingPeriod() Returns Incorrect ValueEpoch Governor · ChainSecurity · 13 Jan 2025Fixed
The report gives no description here.
Open the reportLowDifferent Interfaces in Slipstream ContractsSuperchain Slipstream · ChainSecurity · 13 Nov 2024Fixed
The report gives no description here.
Open the reportLowPool Not Fully Compatible to Be Used as Proxy ImplementationSuperchain diff · ChainSecurity · 5 Nov 2024Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="velodrome-finance"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us