All Reports
Download PDF
Hyperwave Stablecoin Oracle & Off-Chain Bot
2025-06-09
Critical0
High1
Medium3
Low3
Info15
About the Protocol
Stablecoin rate provider oracle and automated off-chain bot for vault management and withdrawal solving.
Findings (22)
H-01HighAcknowledged
Insufficient result validation in HyperLiquid SDK response
On-chain data from HyperLiquid SDK is not properly validated.
M-01MediumAcknowledged
Incorrect price validity check
Quote token price check uses wrong staleness threshold constant.
M-02MediumAcknowledged
Incorrectly assumes USDE/USDC rate will not exceed 1
Rate calculation caps at 1, which may not always hold true.
M-03MediumAcknowledged
Potential misreporting of vault balance
HLP vault balance fetched via SDK may be inaccurate.
L-01LowAcknowledged
Insufficient offchain filtering for withdrawal requests
Pre-filtering of withdrawal requests misses some invalid entries.
Ready to Secure Your Project?
Get a free 30-minute security assessment. We will review your codebase scope and flag the top 3 risk areas.
No commitment required. Typical audits start within 1–2 weeks.