In this audit, we at Asymptotic identified several issues, including one high-severity issue related to missing treasury cap validation, three low-severity issues covering incorrect cooldown checks, withdrawal time validation, and insecure coin metadata handling, and additional advisory-level findings addressing areas such as parameter validation, storage optimization, event handling, and transaction contexts. All reported issues have been remediated. Our verification also confirmed the vault's balance consistency and the correct usage of explicit assertions for input validation.
Balance Consistency: Verifies that the vault's balance always equals the sum of receipt token supply and pending withdrawals, ensuring funds are properly accounted for.
About conditions: We verified that asserts properly validate inputs such that code will only abort with explicit asserts.