# Audits

## **Security is Our Top Priority**

Smart contract risk is highly prevalent among DeFi protocols. One of Usual’s top priorities is to mitigate and reduce the potential risk from the underlying Usual smart contracts by conducting in-depth audits aimed at identifying potential vulnerabilities, logical errors, or inefficiencies and further by conducting continuous security monitoring of the smart contracts. The audits are conducted by leading industry experts and will be used to enhance trust through proper risk and security management on the smart contracts. Please find below the chronological overview of our completed audits.

## **May 2024**

### **Auditor**

[Cantina](https://cantina.xyz/welcome)

* Lead Security Researcher: <mark style="color:purple;">xmxanuel</mark>
* Security Researcher: <mark style="color:purple;">deadroses</mark>
* Associate Security Researcher: <mark style="color:purple;">jonatas</mark>

### **Scope**

* Codebase Simplification: Replacing the "mint engine" with the "swap engine"
* Cantina Managed Audit Phase 1: Permissioned launch smart contracts audit
* Cantina Managed Audit Phase 2: Permissionless launch smart contracts audit

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2F663ZJyiBoOzbNZ4SyAbr%2FPegasus%20permissioned%20launch%20-%20Security%20Review%20by%20Cantina.pdf?alt=media&token=f89c418c-2b67-4b8a-ad9a-2616ea149f96>" %}
Spearbit Cantina Report for Permissionless launch
{% endfile %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FKVqreB0coxbKmJoOxJhc%2FUsual%20Pegasus%20-%20Security%20Review%20by%20Cantina.pdf?alt=media&token=94aee9af-0170-412e-a807-113a725d88ac>" %}
Spearbit Cantina Report for Permissionless launch
{% endfile %}

## **June 2024**

### **Auditor**

[Cantina](https://cantina.xyz/welcome)

### **Scope**

* Public security competition managed by Cantina on the same scope that audited in May 2024
* Link: [Public Competition & Bug Bounty Program](https://cantina.xyz/competitions/31a752e3-8ece-49b3-a9ee-d7294c659340)

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FKv2d0EXVP8O4pSxlmYyL%2FPegasus%20Competition%20by%20Cantina.pdf?alt=media&token=fcecb067-d8c9-4562-bb92-0aad5d0c0e41>" %}
Pegasus Audit Competition run by Cantina
{% endfile %}

## October 2024

### Auditor

[Paladin](https://paladinsec.co/)

### Scope

* L2 Token contracts
* OFT MintAndBurnAdapter
* L1 OFT Adapter
* Link: [L2 Tokens & Adapter Audit](https://paladinsec.co/projects/usual/)

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2Fd1bkFNZnti2CS90W7kGI%2FL2%20Tokens%20Audit%20by%20Paladin.pdf?alt=media&token=3c49c747-544d-42d4-8604-32baf3070da3>" %}
L2 Token Audit conducted by Paladin
{% endfile %}

## November 2024

### Auditors

[Cantina](https://cantina.xyz/welcome)

* Lead Security Researcher: <mark style="color:purple;">deadroses</mark>
* Lead Security Researcher: <mark style="color:purple;">xmxanuel</mark>
* Security Researcher: <mark style="color:purple;">Phaze</mark>
* Associate Security Researcher: <mark style="color:purple;">Chinmay Farkya</mark>

[Halborn](https://www.halborn.com/)

[Sherlock](https://www.sherlock.xyz/) (public audit competition)

### Scope

V1 contract upgrades & additions covering:

* bUSD0 (formerly USD0++)
* DAO Collateral
* SwapperEngine
* USUAL
* USUALS
* USUALSP
* USUAL distribution
* USUAL Airdrop
* USUALx

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FBtEA47JlsWFteDb5GpwE%2FSpearbit%20Cantina%20Report%20for%20Usual%20Pegasus%20Phase%201.pdf?alt=media&token=5ee61161-fd50-4935-96ed-1de73275f856>" %}
Spearbit Cantina Report for Usual Pegasus Phase 1
{% endfile %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FcXuPxTTIHMM2KNopvVFh%2FSpearbit%20Cantina%20Report%20for%20Usual%20Pegasus%20Phase%202.pdf?alt=media&token=9c3c2758-af60-4b81-b843-01ed0874bef0>" %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FKzNfBOtCOLamJuh8pQWF%2FHalborn%20Usual%20V1%20Audit.pdf?alt=media&token=9c068fc5-bce9-477f-962b-a927f4e1cc79>" %}
Halborn Usual V1
{% endfile %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FnJ3MWYlnSYTkLuUFqXz5%2FSherlock%20-%20Usual%20V1%20Audit%20Competition%20Report.pdf?alt=media&token=866b2e6c-ff4b-4fa4-9e38-c6cd761dcfa2>" %}
Sherlock - Usual V1 Audit Competition Report.pdf
{% endfile %}

## December 2024

### Auditors

Blackthorne

[Cantina](https://cantina.xyz/welcome)

### Scope

* WrappedM aka UsualM
* bUSD0 (formerly USD0++) unwrap with Cap for vault strategies
* USUALx

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FW7YOK5z76EilIY39jmxE%2FBlackthorn%20Audit%20Report%20-%20WrappedM.pdf?alt=media&token=995576ee-e809-4ed0-b77a-638d47947874>" %}
Blackthorn Audit Report - WrappedM
{% endfile %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FH3vfJZvsgb1QSMC9cML0%2FSpearbit%20Cantina%20Report%20for%20UsualM%20extension.pdf?alt=media&token=b4a6ced0-0458-4403-a3dc-b3418865b453>" %}
Spearbit Cantina Report for UsualM extension
{% endfile %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FJd3MEliEfOdTpLn8Lj1c%2FSpearbit%20Cantina%20Report%20for%20USD0pp%20adjustments%20.pdf?alt=media&token=17983c8d-8443-436c-b4da-94bdcab5237d>" %}
Spearbit Cantina Report for USD0pp adjustments
{% endfile %}

## January 2025

### Auditors<br>

[Spearbit](https://cantina.xyz/portfolio/51ba92e3-1c77-4e55-be3f-b43b529fd38b)

### Scope

* Claim Redirect
* Fee sweep via DistributionModule
* USUALx adjustment for fee sweep
* bUSD0 (formerly USD0++) adjustment for fee sweep

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FHtgp95SukDIpq9RSnnt8%2FSpearbit%20-%20Audit%20Report%20on%20Redirect%20%26%20Fee%20Sweep.pdf?alt=media&token=34031538-4cf0-4361-bc5a-72d3c8245126>" %}
Spearbit - Audit Report on Redirect & Fee Sweep
{% endfile %}

## February 2025

### Auditors

[Sherlock](https://www.sherlock.xyz/)\
\
[Spearbit](https://spearbit.com/)

### Scope

* Euler USL vault and oracle
* Usual USL Economic Risk Assessment
* UsualUSDtb
* Yield Module

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FtkQNpfVUW8AybJWRoURx%2FSherlock%20-%20Audit%20Report%20on%20Euler.pdf?alt=media&token=5c927319-294d-4250-a950-e0d92ec580ba>" %}
Sherlock - Audit Report on USL on Euler
{% endfile %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FM9fwC3lrmoXsV51iAmhX%2FSpearbit%20-%20Audit%20Report%20on%20USL%20on%20Euler.pdf?alt=media&token=c119331a-f652-4d13-ac9a-648efcb79eda>" %}
Spearbit - Audit Report on USL on Euler
{% endfile %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FJJRRRX0G6wz1CGyDWHI4%2FOAK%20Security%20-%20Usual%20USL%20Economic%20Risk%20Assessment.pdf?alt=media&token=db96beb4-a834-424f-b62c-e7280f00b620>" %}
OAK Security - Usual USL Economic Risk Assessment
{% endfile %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FLbD0S1mgQJcVQmpwKPoD%2FSherlock%20-%20Audit%20Report%20on%20UsualUSDtB.pdf?alt=media&token=08c4ca09-3d7b-40a5-b808-b6fe7855f2b5>" %}
Sherlock - Audit Report on UsualUSDtb
{% endfile %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FW15r2CMqY4ND4OELp9y6%2FSpearbit%20-%20Audit%20Report%20on%20Yield%20Module.pdf?alt=media&token=e4952c97-ed67-42ce-bd78-36986eaf72f7>" %}
Spearbit - Audit Report on Yield Module
{% endfile %}

For more detailed information on our security measures or to report a potential vulnerability, please contact our security team at <security@usual.company>.

## March 2025

### Auditors

[Sherlock](https://www.sherlock.xyz/)\
\
[Spearbit](https://spearbit.com/)

### Scope

* Usual bUSD0 (formerly USD0++) Investment Vault
* Coherent Audit competition on overall protocol

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FPpuD1K1dwd2rI5YbqRWP%2FSpearbit%20-%20Usual%20USD0%2B%2B%20Investment%20Vault.pdf?alt=media&token=0a981ceb-e3f2-4214-b421-9a7b59480e14>" %}
Spearbit - Usual bUSD0 (formerly USD0++) Investment Vault
{% endfile %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FuIIECu9Z1z2RSIcirRxf%2FSherlock%20-%20Usual%20Labs%20Public%20Audit%20Contest.pdf?alt=media&token=42987c9b-b669-4f35-9dfc-9b5c91bff12a>" %}
Sherlock - Usual Labs Public Audit Contest
{% endfile %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FLQrZex8aJ7jDq4mYpjqU%2FHalborn%20-%20USD0%2B%2B%20Investment%20vault.pdf?alt=media&token=72430ff1-4dd0-44b3-ba9a-65f2ab214504>" %}
Halborn - bUSD0 (formerly USD0++) Investment vault
{% endfile %}

## May 2025

### Auditors

[Hexens](https://hexens.io/)

[Halborn](https://www.halborn.com/audits)

[Sherlock](https://www.sherlock.xyz/)\
\
[Spearbit](https://spearbit.com/)

### Scope

* ETH0 Protocol
* ETH0 Zapper Contract
* USUALX Lockup Contract

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FX5OW30LK9N0f5UHww6lN%2FSpearbit%20-%20Audit%20report%20on%20ETH0.pdf?alt=media&token=df844f0b-1fff-4340-aef8-806fd4609425>" %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FIZ2LqzJHKiWarrkwFRji%2FSherlock%20-%20Audit%20report%20on%20on%20ETH0%20Zapper%20contract.pdf?alt=media&token=356ac968-732b-4bed-bc9e-1de0e59a6d9b>" %}
Sherlock - Audit report on ETH0 Zapper contract
{% endfile %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2F34RgOSQLMEzmUOxpSh2N%2FHexens%20-%20Audit%20report%20on%20UsualXLockup.pdf?alt=media&token=752294fa-d850-49a9-b9eb-31c637a4a537>" %}
Hexens - Audit report on UsualX Lockup Contract
{% endfile %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FRRE8HgRDg1V2qCIVA604%2FHalborn%20-%20Audit%20report%20on%20UsualXLockup.pdf?alt=media&token=e3aa1973-8966-4409-b690-99a455eea620>" %}
Halborn - Audit report on UsualX Lockup Contract
{% endfile %}

## July 2025

### Auditors

[Sherlock](https://www.sherlock.xyz/)

[Spearbit](https://spearbit.com/)

### Scope

* bUSD0 (formerly USD0++) Upgrade (Updating Burn Redemption Mechanism)
* Sync Vault remediation
* Usual USDC

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2F8gq6et5OGqJHJGphqav6%2FSherlock-%20Audit%20report%20on%20USD0%2B%2B%20upgrade%20(Burn%20Redemption%20Mechanism).pdf?alt=media&token=27674355-9c34-496e-970d-723f522221fa>" %}

Sherlock - Audit report on bUSD0 (formerly USD0++) upgrade (Burn Redemption Mechanism)

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FzSchlFhZb6F4gUpuYu3E%2FSpearbit%20-%20Audit%20report%20on%20Sync%20Vault%20remediation.pdf?alt=media&token=1a069c46-4387-40ee-bc35-b4869a4702fc>" %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2Fok3wIxqFWGKqBnRQw1Dw%2FSpearbit%20-%20Audit%20report%20on%20Usual%20USDC.pdf?alt=media&token=98892efa-f5af-47b5-93e9-aaddb2d93749>" %}

## October 2025

### Auditors

[Sherlock](https://www.sherlock.xyz/)

### Scope

* EUR0

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2Fi8N4N5nDayNTlZsshidU%2FSherlock%20-%20EUR0%20Protocol%20Audit.pdf?alt=media&token=9e0852df-a5c9-48f7-8a95-118e1166bb59>" %}

## November 2025

### Auditors

[Hexens](https://hexens.io/)

[Halborn](https://www.halborn.com/audits)

[Sherlock](https://www.sherlock.xyz/)

### Scope

* sUSD0
* sEUR0
* RDM (Revenue Distribution Module)
* USD0a Protocol
* bUSD0 (formerly USD0++) Upgrade

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FW8L1sNcxO9fA7jVvCtUZ%2FHexens%20-%20sUSD0%20Protocol%20Audit.pdf?alt=media&token=c1e65ec3-cdf5-4396-93ff-396c8a5a71ba>" %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2F0ng3wp3joaciGht2vx48%2FHalborn%20-%20sUSD0-SEUR0-RDM%20Audit.pdf?alt=media&token=950a9779-c8c5-4d39-86d6-6a65778dd8a0>" %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FADNHL3PqW4HMQ3m5Vweo%2FHexens%20-%20USD0a%20Protocol%20Audit.pdf?alt=media&token=3a34f6d7-d907-4541-89ce-93cbfa6970a1>" %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FLcHMqp6aagbzqsfUXR33%2FSherlock%20-%20USD0a%20Protocol%20Audit.pdf?alt=media&token=1f32edd9-4701-4ffe-81a1-6e1b3fe63ee3>" %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FroXirXvK4iNSufm3lrik%2FSherlock%20-%20bUSD0%20Upgrade%20Audit.pdf?alt=media&token=73e9a975-7b99-45f2-a2c4-b2afc6a88e15>" %}

{% file src="<https://1503334455-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpUhQzPJGdJzuLTQ5sCym%2Fuploads%2FG7sBFMaZHmGWhkg8WPtt%2FHexens%20-%20bUSD0%20Upgrade%20Audit.pdf?alt=media&token=775baffe-4fc5-46c2-8a18-4401a9080815>" %}