| Severity | Tool | Title | Validated | Confirmed |
|---|---|---|---|---|
| critical | detector | Untrusted DELEGATECALL target reachable | no | no |
| medium | codex | batchExecute reuses msg.value across delegatecalls, enabling protocol-fee inflation | no | — |
| medium | cast | DELEGATECALL present | no | — |
| low | codex | Unchecked ERC20 transfer return values in ZRX vault and reward payouts | no | — |
| Run ID | Status | Validated | Total findings | Created |
|---|---|---|---|---|
| 16d829c8-3cab-4cbb-9742-3289e5bd9a3d | complete | crit 0 high 0 | 4 | 3 months ago |