Velodrome Finance security record
As of 30 Oct 2026, Velodrome Finance has 8 audit reports by 1 security firm on Trustblock; the latest is by ChainSecurity, dated 30 Jun 2025. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits8
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Verified ERC20 | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Velodrome Superswap Router | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Velodrome Superchain Interoperability | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Velodrome Sink Gauge v2 | Security firm: ChainSecurity | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · chainsecurity.com |
| Slipstream Dynamic Fee | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Epoch Governor | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Superchain Slipstream | Security firm: ChainSecurity | Date: | Scope: Files named in the report | 1 critical finding, fixed | Open · chainsecurity.com |
| Superchain diff | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
Findings29
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 4 |
| Medium | 0 | 0 | 8 |
| Low | 0 | 4 | 12 |
Marked Informational by the firms. Not counted as findings.
InformationalAmbiguous CONTRACT_BALANCE ConstantVelodrome Superswap Router · ChainSecurity · 30 Jun 2025Fixed
The report gives no description here.
Open the reportInformationalAmbiguous Sender Parameter in BridgeRouter.prepareTokensForBridgeVelodrome Superswap Router · ChainSecurity · 30 Jun 2025Fixed
The report gives no description here.
Open the reportInformationalDuplicate Function _f and _kVelodrome Superswap Router · ChainSecurity · 30 Jun 2025Fixed
The report gives no description here.
Open the reportInformationalEvent Fields Not IndexedVerified ERC20 · ChainSecurity · 30 Jun 2025Fixed
The report gives no description here.
Open the reportInformationalGas SavingsVerified ERC20 · ChainSecurity · 30 Jun 2025Fixed
The report gives no description here.
Open the reportInformationalIncorrect Path Length ConditionVelodrome Superswap Router · ChainSecurity · 30 Jun 2025Fixed
The report gives no description here.
Open the reportInformationalIncorrect Recipient Emitted in Dispatcher EventsVelodrome Superswap Router · ChainSecurity · 30 Jun 2025Fixed
The report gives no description here.
Open the reportInformationalMagic Value for address[][] InitializationVerified ERC20 · ChainSecurity · 30 Jun 2025Fixed
The report gives no description here.
Open the reportInformationalMissing AuthorizedSet EventVerified ERC20 · ChainSecurity · 30 Jun 2025Fixed
The report gives no description here.
Open the reportInformationalMissing Sanity CheckVerified ERC20 · ChainSecurity · 30 Jun 2025Fixed
The report gives no description here.
Open the reportShow 10 more
InformationalOutdated DependenciesVelodrome Superswap Router · ChainSecurity · 30 Jun 2025Fixed
The report gives no description here.
Open the reportInformationalPotential Gas and Code Size OptimizationVelodrome Superswap Router · ChainSecurity · 30 Jun 2025Fixed
The report gives no description here.
Open the reportInformationalState Variables Return Misleading ValuesVerified ERC20 · ChainSecurity · 30 Jun 2025Fixed
The report gives no description here.
Open the reportInformationalUnused Constant MAX_GAS_PER_HOOKVerified ERC20 · ChainSecurity · 30 Jun 2025Fixed
The report gives no description here.
Open the reportInformationalArbitrary Address Can Be Revived as a GaugeVelodrome Superchain Interoperability · ChainSecurity · 20 May 2025Fixed
The report gives no description here.
Open the reportInformationalassert Statement in XERC20Factory Is RedundantVelodrome Superchain Interoperability · ChainSecurity · 20 May 2025Fixed
The report gives no description here.
Open the reportInformationalMissing chainId Check in TokenBridge.handle()Velodrome Superchain Interoperability · ChainSecurity · 20 May 2025Fixed
The report gives no description here.
Open the reportInformationalSpecification InaccuracyVelodrome Superchain Interoperability · ChainSecurity · 20 May 2025Fixed
The report gives no description here.
Open the reportInformationalUsage of Both transferFrom() and safeTransferFrom()Velodrome Superchain Interoperability · ChainSecurity · 20 May 2025Fixed
The report gives no description here.
Open the reportInformationalXERC20 Hardcoded 18 DecimalsVelodrome Superchain Interoperability · ChainSecurity · 20 May 2025Fixed
The report gives no description here.
Open the reportShow 6 more
InformationalIncorrect NatSpec for _castVote()Epoch Governor · ChainSecurity · 13 Jan 2025Fixed
The report gives no description here.
Open the reportInformationalMissing EventsEpoch Governor · ChainSecurity · 13 Jan 2025Fixed
The report gives no description here.
Open the reportInformationalUnused Imports and VariablesEpoch Governor · ChainSecurity · 13 Jan 2025Fixed
The report gives no description here.
Open the reportInformationalVoting Escrow Public View Exposed Multiple TimesEpoch Governor · ChainSecurity · 13 Jan 2025Fixed
The report gives no description here.
Open the reportInformationalEmission Cap Not Sanitized Can Cause OverflowSuperchain Slipstream · ChainSecurity · 13 Nov 2024Fixed
The report gives no description here.
Open the reportInformationalgetAmountsOut Returns Zero on Invalid SwapSuperchain diff · ChainSecurity · 5 Nov 2024Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="velodrome-finance"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us