Clique — Lock Program

Audit report published Jun 2025. Solana · Rust (Anchor).

Findings at a glance

Severity	Count
Medium	4
Low	1
Total	5

Summary

Safe Edges reviewed Clique's Solana lock program, covering the deposit vault and the vesting module, in 2025. Five issues were identified: four Medium and one Low. The Medium issues covered deposits that are never recorded against the user, vault and vesting initialization that any account can front-run, and vesting schedules that can start in the past. Clique acknowledged all five.

Read the full report (PDF).

Findings

Medium (4)

• M-01 User Balance Is Not Recorded During Deposit — Acknowledged
• M-02 Unauthorized User Can Front-Run Vault Initialization — Acknowledged
• M-03 Unauthorized User Can Front-Run Vesting Initialization — Acknowledged
• M-04 Invalid Schedule Can Bypass Vesting Time Constraints — Acknowledged

Low (1)

• L-01 Missing Default Address Valdiation — Acknowledged

More published reports

Related services

Get a fixed quote in 24 hours

Send the repository and a commit hash through the contact form, message @bugtester25 on Telegram, or book a 30-minute scoping call. 200+ protocols audited · $4B+ secured · 0 hacks post-audit. Prefer email? info@safeedges.in.