All Reports
Download PDF
Hyperwave CoreWriter
2025-08-25
Critical0
High0
Medium0
Low3
Info3
About the Protocol
On-chain vault management contracts for HyperLiquid with trade staking and whitelist controls.
Findings (6)
L-01LowAcknowledged
Blocked whitelist removals for de-listed accounts
De-listed accounts cannot be removed from whitelists.
L-02LowAcknowledged
Joint withdrawal and spot transfer whitelist could lead to locked funds
Shared whitelist for withdrawals and transfers creates fund locking risk.
L-03LowAcknowledged
Receive of Native token is enabled while withdrawal is not possible
Contract can receive native HYPE but has no withdrawal mechanism.
I-01InfoAcknowledged
Introduce validation of the order size
Order sizes lack HyperLiquid decimal limit validation.
I-02InfoAcknowledged
Replace storage writes with memory ones
Unnecessary storage reads can be optimized to memory.
Ready to Secure Your Project?
Get a free 30-minute security assessment. We will review your codebase scope and flag the top 3 risk areas.
No commitment required. Typical audits start within 1–2 weeks.