Vyper security record
As of 23 Oct 2026, Vyper has 1 audit report on Trustblock, by ChainSecurity, dated 24 Apr 2025. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Vyper Compiler 0.4.2 Pull Requests | Security firm: ChainSecurity | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · chainsecurity.com |
Findings27
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 3 | 0 | 0 |
| Low | 24 | 0 | 0 |
MediumIncorrect Order of Evaluation of Arguments of Builtin FunctionVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportMediumMake_setter Is Incorrect for Complex Types When the RHS References the LHS With a Function CallVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportMediumMetadata Journal Can Rollback IncorrectlyVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowAssertion Could Be More Precise in parse_BinopVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowAssertions Are Not ConstantVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowCalls to State-Modifying Functions in Range Expressions Are Not Caught by the Type-CheckerVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowDefault Arguments Are Treated as Keyword ArgumentsVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowEpsilon Is Not DocumentedVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowIfExp Cannot Be Used in a SubscriptVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowIfExp Fails at Codegen When Used With Self or Environment VariablesVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportShow 10 more
LowIfExp Not Annotated When Used as Iterable for a LoopVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowImplements Statement Does Not Enforce the Same Indexation of EventsVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowImported Contracts Are Not Fully Semantically ValidatedVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowin and Not in Cannot Be Used With DynArray of EnumsVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowIncorrect Typing of Builtins Whose Return Type Depends on Some of Its Argument's TypesVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowIncorrect Typing of Loop Iterable When It Is a List LiteralVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowIncorrect Typing of Raw_Call When Max_Outsize=0 in KwargsVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowMultiple Evaluations of DST Lead to Non-Unique Symbol Errors When Copying Bytes Arrays or DynArraysVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowNesting a Pop in Append Results in Incorrect BehaviorVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowNo Sanity Check on Storage Layout FilesVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportShow 7 more
LowOverriding Storage Layout Fails With ImmutablesVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowPR 3134 Has Been RevertedVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowRedundant and Incomplete Function Selector Collision ChecksVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowReferences to Public Constant and Immutables With Self Missed by the TypecheckerVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowSemantic Analysis of the Imported Contract Is Done With the Current Contract's NamespaceVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowStateAccessViolation When "Self" Is Used as a Struct Field NameVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportLowTypecheckFailure When Using Address and Self Members as Struct Field NameVyper Compiler 0.4.2 Pull Requests · ChainSecurity · 24 Apr 2025Open
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="vyper"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us