VaultV2

Mantle Mainnet · scan depth quick · generated 7/2/2026, 1:09:50 AM

Risk Score

100

Archon completed a read-only Mantle Mainnet audit of VaultV2 and found 17 deterministic findings. The highest-priority issue is Reentrancy Eth, with risk score 100/100 based on severity-weighted findings. Reentrancy Eth was detected from deterministic analysis at VaultV2.sol:27-35. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used. Review the recommended fixes and run regression tests before deployment.

Findings

low: 3high: 2info: 10medium: 1critical: 1

Severity	Finding	Location	Confidence
high	Reentrancy Eth Reentrancy Eth was detected from deterministic analysis at VaultV2.sol:27-35. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	VaultV2.sol:27	86%
low	Reentrancy Events Reentrancy Events was detected from deterministic analysis at VaultV2.sol:27-35. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	VaultV2.sol:27	74%
info	Low Level Calls Low Level Calls was detected from deterministic analysis at VaultV2.sol:27-35. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	VaultV2.sol:27	74%
info	Redundant Statements Redundant Statements was detected from deterministic analysis at VaultV2.sol:48. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	VaultV2.sol:48	74%
low	Cache Array Length Cache Array Length was detected from deterministic analysis at VaultV2.sol:55. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	VaultV2.sol:55	74%
critical	External value transfer before balance update External value transfer before balance update was detected from deterministic analysis at VaultV2.sol:30. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	VaultV2.sol:30	86%
high	Missing slippage enforcement for swap output Missing slippage enforcement for swap output was detected from deterministic analysis at VaultV2.sol:37. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	VaultV2.sol:37	86%
medium	Unbounded storage iteration can create runaway gas cost Unbounded storage iteration can create runaway gas cost was detected from deterministic analysis at VaultV2.sol:55. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	VaultV2.sol:55	74%
low	Review calldata parameter width Review calldata parameter width was detected from deterministic analysis at VaultV2.sol:27. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	VaultV2.sol:27	74%
info	Replace long revert string with custom error Replace long revert string with custom error was detected from deterministic analysis at VaultV2.sol:28. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	VaultV2.sol:28	74%
info	Replace long revert string with custom error Replace long revert string with custom error was detected from deterministic analysis at VaultV2.sol:41. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	VaultV2.sol:41	74%
info	Cache repeated storage read Cache repeated storage read was detected from deterministic analysis at VaultV2.sol:18. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	VaultV2.sol:18	74%
info	Use unchecked loop increment where bounded Use unchecked loop increment where bounded was detected from deterministic analysis at VaultV2.sol:55. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	VaultV2.sol:55	74%
info	Cache array length before loop Cache array length before loop was detected from deterministic analysis at VaultV2.sol:55. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	VaultV2.sol:55	74%
info	Use != 0 for unsigned non-zero checks Use != 0 for unsigned non-zero checks was detected from deterministic analysis at VaultV2.sol:16. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	VaultV2.sol:16	74%
info	Use != 0 for unsigned non-zero checks Use != 0 for unsigned non-zero checks was detected from deterministic analysis at VaultV2.sol:40. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	VaultV2.sol:40	74%
info	Remove redundant zero initialization Remove redundant zero initialization was detected from deterministic analysis at VaultV2.sol:55. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	VaultV2.sol:55	74%

Public validation

Challenge ledger

Anyone can challenge this artifact. Archon records the challenge in the database with a deterministic hash and references any existing report proof tx/hash. No new validation contract is implied.

No challenges recorded yet.

Proof Verification

Stored report hash

0xedb87b30f1dd9ba3f4396b17a4bbe57f43be900a02b5fab995ada75333f9d2d8

Re-derived hash

0xedb87b30f1dd9ba3f4396b17a4bbe57f43be900a02b5fab995ada75333f9d2d8

Metadata URI

ipfs://QmeQ2s1Thvy3egaqhGEnkSL2C5oqeD6yurZ8Nv88KFPWNE

Result

Hash match + ERC-8004 on-chain attestation present

Mantlescan

ERC-8004 Reference

{
  "author": "0xBd88eAE165F8A00B1B33357Fb0880CD4fE5C5E70",
  "agentId": "97",
  "contract": "0xe7043e2ec95eF357FbBa3359BA2f1edb10cEAD2a",
  "loggedBy": "0xBd88eAE165F8A00B1B33357Fb0880CD4fE5C5E70",
  "mechanism": "archon-proof-registry",
  "reputation": {
    "tag2": "risk:100",
    "txHash": "0x2ee640da48ebed954ddabef663aeb0b2d5322635620cca74b9245b48bfc9baa0",
    "agentId": "97",
    "feedbackIndex": "27",
    "feedbackClient": "0x8cd94bc5Ce29ECDA7feDbc14D264873835284D79",
    "reputationRegistry": "0x8004BAa17C55a88189AE136b182e5fdA19dE9b63"
  }
}

Careful scope

Archon reports are risk intelligence with confidence scores and recommended fixes. They are not guarantees, certifications, or claims that a contract is safe.