Incident
Incident,
5M.
Source: De.Fi incident database.
- Audits before it
- 4.
- Audits since
- 63, the latest dated 13 Sep 2025.
Venus Protocol security record
As of 30 Oct 2026, Venus Protocol has 67 audit reports by 7 security firms on Trustblock; the latest is by Quantstamp, dated 13 Sep 2025. Those reports list no open critical findings. It also holds 2 deployed contracts on 2 chains and 2 incidents (latest 12 May 2022).
Critical findings
No open critical findings
Across the 67 reports, 4 critical findings were reported. Each is marked fixed by the firm that reported it. See the findings
Incident
Incident 12 May 2022
Source: De.Fi incident database. 63 audits have been published since. See the incidents
Open the latest report
Your label, live
Get the label for your siteRecord last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits67
Newest first
67 audit reports, 40 in CertiK’s series, 11 in Quantstamp’s series
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Migration Core (Venus) | Security firm: Quantstamp | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · certificate.quantstamp.com |
| e-mode Core Pool (Venus) | Security firm: Quantstamp | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · certificate.quantstamp.com |
| Venus - WUSDMLiquidator | Security firm: CertiK | Date: | Scope: Repository at commit 0c7461c | No open critical findings | Open · skynet.certik.com |
| Venus - asBNB Oracle | Security firm: CertiK | Date: | Scope: Repository at commit b88b277 | No open critical findings | Open · skynet.certik.com |
| Venus - ZkETH Oracle | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - RiskOracle Integration | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - ERC4626Oracle | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus Protocol | Security firm: Cyberscope | Date: | Scope: 1 address on Ethereum | No open critical findings | Open · cyberscope.io |
| Venus - PendleOracle Upgrade | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - ACM Commands Aggregator | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - Risk Fund Upgrade | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - New Custom Oracle | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - Two Kinks Interest Rate | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus Oracle | Security firm: Quantstamp | Date: | Scope: Repository at commit b24ef72 | No open critical findings | Open · certificate.quantstamp.com |
| Venus - sfrxETH oracle adapter | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - Mutichain Governance | Security firm: Quantstamp | Date: | Scope: Repository at commit 266ae02 | No open critical findings | Open · certificate.quantstamp.com |
| Venus - VAI Controller Upgrade | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - Mesh Architecture | Security firm: CertiK | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · skynet.certik.com |
| Venus - Correlated token oracles | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - Correlated Oracles | Security firm: Quantstamp | Date: | Scope: Repository at commit 3e86e32 | No open critical findings | Open · certificate.quantstamp.com |
| Venus - Unlist Market & Borrow Cap | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Venus - redeemAndUnwrap | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Time-Based Contracts (Venus) | Security firm: Quantstamp | Date: | Scope: Repository at commit 1a6cf0c | No open critical findings | Open · certificate.quantstamp.com |
| Venus Protocol: Native Token Gateway | Security firm: Quantstamp | Date: | Scope: Repository at commit 9fe398b | No open critical findings | Open · certificate.quantstamp.com |
| Venus - Native Token Gateway | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
Findings426
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 3 |
| High | 16 | 0 | 13 |
| Medium | 5 | 4 | 32 |
| Low | 71 | 60 | 222 |
Marked Informational by the firms. Not counted as findings.
InformationalNon ERC20-Compliance Of VTokenAcknowledged
The report gives no description here.
InformationalInconsistency Between Document And ImplementationFixed
The report gives no description here.
Incidents2
Attached through a shared contract address. Our incident data ends in Oct 2026.
Incident
Incident,
Source: De.Fi incident database.
- Audits before it
- 1.
- Audits since
- 66, the latest dated 13 Sep 2025.
Contracts2
| Address | Chain | Source code |
|---|---|---|
| 0xd3cc9d8f3689b83c91b7b59cab4946b063eb894a | Chain: Ethereum | Source code: Verified source |
| 0x67c549a18abfad127b13f8d56738f43a21bb62a7 | Chain: BNB Chain | Source code: Verified source |
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="venus-protocol"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us