Zaros security record
As of 21 Oct 2026, Zaros has 1 audit report on Trustblock, by Cyfrin, dated 13 Jul 2024. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Zaros Finance Audit Report | Security firm: Cyfrin | Date: | Scope: Not recorded (see the report) | 5 critical findings, fixed | Open · GitHub |
Findings32
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 5 |
| High | 0 | 0 | 3 |
| Medium | 0 | 2 | 10 |
| Low | 0 | 2 | 10 |
CriticalAttacker can burn USDToken from any userZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportCriticalAttacker can perform a risk-free trade to mint free USDz tokens by opening then quickly closing positions for markets using negative makerFeeZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportCriticalAttacker can steal user deposited collateral tokens by updating account nft token to a custom attack contract addressZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportCriticalImpossible to liquidate accounts with multiple active markets as LiquidationBranch::liquidateAccounts reverts due to corruption of ordering in TradingAccount::activeMarketsIdsZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportCriticalTradingAccount::withdrawMarginUsd transfers an incorrectly larger amount of margin collateral for tokens with less than 18 decimalsZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportHighGlobalConfiguration::removeCollateralFromLiquidationPriority corrupts the collateral priority order resulting in incorrect order of collateral liquidationZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportHighTrader can’t reduce open position size when under initial margin requirement but over maintenance margin requirementZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportHighTradingAccountBranch::depositMargin attempts to transfer greater amount than user deposited for tokens with less than 18 decimalsZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportMediumAnyone can cancel traders’ market orders due to missing access control in OrderBranch::cancelMarketOrderZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportMediumChainlinkUtil::getPrice doesn’t check for stale priceZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportShow 10 more
MediumChainlinkUtil::getPrice doesn’t check if L2 Sequencer is downZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportMediumChainlinkUtil::getPrice will use incorrect price when underlying aggregator reaches minAnswerZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportMediumKeeper fills market order using incorrect old marketId but newly updated position size when trader updates open order immediately before keeper processes original orderZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportMediumLiquidation leaves traders with unhealthier and riskier collateral basket, making them more likely to be liquidated in future tradesZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportMediumProtocol operator can disable market with open positions, making it impossible for traders to close their open positions but still subjecting them to potential liquidationZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportMediumProtocol operator can disable settlement for market with open positions, making it impossible for traders to close their open positions but still subjecting them to potential liquidationZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportMediumSettlementBranch::_fillOrder doesn’t pay order and settlement fees if PNL is positiveZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportMediumUsers can easily bypass collateral depositCap limit using multiple deposits under the limitZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportLowGracefully handle state where perp market maxOpenInterest is updated to be smaller than the current open interestZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportLowMarketOrder minimum lifetime can be easily bypassedZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportShow 8 more
LowOrderBranch::getMarginRequirementForTrade doesn’t include order and settlement fees when calculating margin requirementsZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportLowPerpMarket::getOrderFeeUsd incorrectly charges makerFee when skew is zero and trade is buy orderZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportLowPerpMarket::getOrderFeeUsd rewards traders who flip the skew with makerFee for the full tradeZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportLowRemove max open interest check when liquidating in Liquidation- Branch::liquidateAccountsZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportLowSettlementBranch::_fillOrder can revert for positions with negative PNL in markets with negative maker/taker feesZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportLowSettlementBranch::_fillOrder reverts if absolute value of PNL is smaller than sum of order and settlement feesZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportLowTraders can’t limit slippage and expiration time when creating market ordersZaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportLowTradingAccount::deductAccountMargin can incorrectly add the same values multiple times to output parameter marginDeductedUsdX18Zaros Finance Audit Report · Cyfrin · 13 Jul 2024Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="zaros"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us