Y2k Finance security record
As of 21 Oct 2026, Y2k Finance has 1 audit report on Trustblock, by Zellic, dated 30 Oct 2023. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Y2K Finance security assessment | Security firm: Zellic | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
Findings13
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 3 |
| Medium | 0 | 0 | 4 |
| Low | 0 | 0 | 5 |
CriticalEmissions can be claimed multiple timesY2K Finance security assessment · Zellic · 30 Oct 2023Fixed
The report gives no description here.
Open the reportHighThe lack of token addresses’ verificationY2K Finance security assessment · Zellic · 30 Oct 2023Fixed
The report gives no description here.
Open the reportHighThe lack of verification of the payload dataY2K Finance security assessment · Zellic · 30 Oct 2023Fixed
The report gives no description here.
Open the reportHighThe value of queuedWithdrawalTvl can be artificially inflatedY2K Finance security assessment · Zellic · 30 Oct 2023Fixed
The report gives no description here.
Open the reportMediumConversion between different units does not account for token decimalsY2K Finance security assessment · Zellic · 30 Oct 2023Fixed
The report gives no description here.
Open the reportMediumIncompatibility with USDT tokenY2K Finance security assessment · Zellic · 30 Oct 2023Fixed
The report gives no description here.
Open the reportMediumIncorrect weights calculationY2K Finance security assessment · Zellic · 30 Oct 2023Fixed
The report gives no description here.
Open the reportMediumMalicious users can profit due to temporary exchange rate fluctuationsY2K Finance security assessment · Zellic · 30 Oct 2023Fixed
The report gives no description here.
Open the reportLowArray out-of-bound exception in _removeVaultsY2K Finance security assessment · Zellic · 30 Oct 2023Fixed
The report gives no description here.
Open the reportLowIncorrect loop implementation in the function clearQueuedDepositsY2K Finance security assessment · Zellic · 30 Oct 2023Fixed
The report gives no description here.
Open the reportShow 3 more
LowIncorrect return value in fetchEpochIds in case of invalid vaultsY2K Finance security assessment · Zellic · 30 Oct 2023Fixed
The report gives no description here.
Open the reportLowThe function _removeVaults returns earlyY2K Finance security assessment · Zellic · 30 Oct 2023Fixed
The report gives no description here.
Open the reportLowThe weightStrategy range violationY2K Finance security assessment · Zellic · 30 Oct 2023Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="y2k"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us