Audits & Security

Audits

Size has conducted 10+ external audits to date by several firms, with plans to continuously review code.

Date	Version	Auditor	Scope/ Description
2025-06-23	v1.8	Omniscia	Incremental audit, fix review
2025-06-23	v1.8	Hashlock	Incremental audit, fix review
2025-06-14	v1.8-rc	Cantina	Incremental audit, user vaults
2025-05-26	v1.8-rc	Custodia Security	Incremental audit, deploy scripts
2025-02-26	v1.7	Cantina	Full codebase
2025-02-12	v1.6.1	Custodia Security	Incremental audit, copy trading
2024-12-10	v1.5.1	Chain Defenders	Incremental audit, fallback oracle
2024-11-13	v1.5	Custodia Security	Incremental audit, cross-market liquidity
2024-06-10	v1.0	Code4rena	Full codebase, $200k competition pot
2024-06-08	v1.0-rc	Spearbit	Full codebase
2024-03-26	v1.0-beta	Solidified	Full codebase

Audits for Very Liquid Vaults

Auditor	Date	Link	Scope/ Description	Version
Obsidian	TBA	Link	Full codebase	1.0
Open Zeppelin	TBA	Link	Full codebase	1.0

Internal Audits and Tests

In addition to security audits, we have conducted several internal reviews and taken various measures to ensure that our coding practices meet the highest standards:

1. 93% test coverage (Test-to-Code > 3x)

2. Stateful Invariant Tests (Echidna, Medusa, Foundry 38 properties)

3. Stateless Fuzz Tests (Foundry)

4. Static Analyzers (Slither, Solhint, LightChaserV3)

5. Formal Verification (Halmos)

6. Auditable protocol upgrades with Foundry scripts

Bug Bounty

A $50k bug bounty is live on Cantina.

Get in Touch

security (at) size.credit