cyfrin/arcadia-protocol

Audit report · Aug 20, 2026

Audit info

Findings: 7
Duration: 5h 12m
Repository: cyfrin/arcadia-protocol
Branch: main
Git ref: 9f75d15b
Scope: 12 files · 4,638 nSLOC

Security findings

7 Vulnerabilities found

FindingPercentTotal

Critical 29% 2

High 14% 1

Medium 14% 1

Low 14% 1

Informational 14% 1

Gas 14% 1

Context Docs read

known-issues.md
design-decisions.md
trust-model.md
invariants.md
supported-tokens.md

Remediation

7 Recommended remediations

This AI-assisted report covers only the listed scope. Each audit is independent, and repeat runs may show different findings. It does not replace a full human audit.

Need full-system assurance?

Have Cyfrin’s security researchers validate the findings, review the full system, and work directly with your team.

Request an audit

Report findings 7

Critical findings 2 vulnerabilities

Critical control weakness in AccessController.sol Resolved location: src/AccessController.sol:41 Remediation available Critical control weakness in Bridge.sol Resolved location: src/Bridge.sol:42 Remediation available

High findings 1 vulnerabilities

Unchecked token transfers across withdrawal paths Resolved location: src/LiquidityPool.sol:41 Remediation available

Medium findings 1 vulnerabilities

Oracle delay combines with permissive liquidation Resolved location: src/TokenVault.sol:41 Remediation available

Low findings 1 vulnerabilities

Low control weakness in FeeManager.sol Resolved location: src/FeeManager.sol:41 Remediation available

Informational findings 1 notes

Informational control weakness in AccessController.sol Resolved location: src/AccessController.sol:41 Remediation available

Gas findings 1 notes

Gas control weakness in AccessController.sol Resolved location: src/AccessController.sol:41 Remediation available