Incident
Incident,
5M.
Source: De.Fi incident database.
- Audits before it
- 4.
- Audits since
- 63, the latest dated 13 Sep 2025.
Venus Protocol security record
As of 30 Oct 2026, Venus Protocol has 67 audit reports by 7 security firms on Trustblock; the latest is by Quantstamp, dated 13 Sep 2025. Those reports list no open critical findings. It also holds 2 deployed contracts on 2 chains and 2 incidents (latest 12 May 2022).
Critical findings
No open critical findings
Across the 67 reports, 4 critical findings were reported. Each is marked fixed by the firm that reported it. See the findings
Incident
Incident 12 May 2022
Source: De.Fi incident database. 63 audits have been published since. See the incidents
Open the latest report
Your label, live
Get the label for your siteRecord last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits67
Newest first
67 audit reports, 40 in CertiK’s series, 11 in Quantstamp’s series
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Venus - Multichain Governance | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus wstETH Oracle | Security firm: Quantstamp | Date: | Scope: Repository at commit f638cef | No open critical findings | Open · certificate.quantstamp.com |
| Venus - Token Converter Addendum | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus TWAP Oracle | Security firm: HashEx | Date: | Scope: 1 address on BNB Chain | No open critical findings | Open · hashex.org |
| Venus - Oracle for wstETH on Ethereum | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - Time based contracts & SeizeVenus | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - XVS Token Bridge | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - Prime and Oracle Changes | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus Multichain Support | Security firm: Quantstamp | Date: | Scope: Repository at commit 5299454 | No open critical findings | Open · certificate.quantstamp.com |
| Venus - Private Conversions | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - Prime | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - Token Converter | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus Token Converter Audit | Security firm: OpenZeppelin | Date: | Scope: Files named in the report | No open critical findings | Open · blog.openzeppelin.com |
| Venus - Forced liquidations in Isolated pools | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus Income Allocation | Security firm: Quantstamp | Date: | Scope: Repository at commit 2e0f5f6 | No open critical findings | Open · certificate.quantstamp.com |
| Venus - Force Liquidations | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - Allocation of Income | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus Protocol Diamond Comptroller Audit | Security firm: OpenZeppelin | Date: | Scope: Files named in the report | No open critical findings | Open · blog.openzeppelin.com |
| Venus - RiskFund & Shortfall | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - Isolated Pools Allow Multiple Rewards Dist | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - Diamond Comptroller (Subscription Audit 5) | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus Protocol V2 | Security firm: Quantstamp | Date: | Scope: Repository at commit a9c6e07 | No open critical findings | Open · certificate.quantstamp.com |
| Venus Liquidator | Security firm: Quantstamp | Date: | Scope: Repository at commit 457c8cd | No open critical findings | Open · certificate.quantstamp.com |
| Venus - Oracle Update | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - RewardsDistributor | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
Findings426
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 3 |
| High | 16 | 0 | 13 |
| Medium | 5 | 4 | 32 |
| Low | 71 | 60 | 222 |
Marked Informational by the firms. Not counted as findings.
InformationalNon ERC20-Compliance Of VTokenAcknowledged
The report gives no description here.
InformationalInconsistency Between Document And ImplementationFixed
The report gives no description here.
Incidents2
Attached through a shared contract address. Our incident data ends in Oct 2026.
Incident
Incident,
Source: De.Fi incident database.
- Audits before it
- 1.
- Audits since
- 66, the latest dated 13 Sep 2025.
Contracts2
| Address | Chain | Source code |
|---|---|---|
| 0xd3cc9d8f3689b83c91b7b59cab4946b063eb894a | Chain: Ethereum | Source code: Verified source |
| 0x67c549a18abfad127b13f8d56738f43a21bb62a7 | Chain: BNB Chain | Source code: Verified source |
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="venus-protocol"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us