| Severity | Tool | Title | Validated | Confirmed |
|---|---|---|---|---|
| high | detector | Untrusted CALL target/value reachable | no | no |
| high | detector | ETH value transfer possible | no | no |
| medium | codex | Upgradeable Portal can be initialized by anyone if proxy/implementation is left uninitialized | no | — |
| medium | codex | Fee-on-transfer/rebasing tokens can undercollateralize synths | no | — |
| low | codex | Revert request functions are replayable, allowing repeated bridge calls | no | — |
| info | cast | Heavy EXTCODE*/BALANCE usage | no | — |
| Run ID | Status | Validated | Total findings | Created |
|---|---|---|---|---|
| e9af998f-590b-4edf-86da-58a129eb997a | failed | crit 0 high 0 | 3 | 3 months ago |
| 9ddbf2b4-3560-4207-aba0-175d63d7e610 | failed | crit 0 high 0 | 6 | 3 months ago |