AIOil Security Shield — Scan Verification

Scan ID: fcedbde98d487709 · 2026-07-20T11:30:07.952Z · code hash b86d69929bc52849ef0616a083d6dd4b25d4a5ed6b8e7f93b6ffc1457d8fe6ff

Verdict: Vulnerabilities found — review required before deployment

Critical 0 · High 1 · Medium 0 · Low 0

High — Fee calculation relies on user-provided trade_value_lamports without verification. In `execute_swap_with_fee`, the fee amount is computed from `trade_value_lamports`, which is entirely controlled by the caller. The program has no oracle or cross-instruction verification to confirm the actual swap value. An attacker can supply a small or zero `trade_value_lamports` to pay little or no fee while executing a much larger swap in the same transaction.

AIOil Devnet

Not tested on AIOil Devnet.

Download full report (Markdown) ↓

AIOil Security Shield runs automated, multi-agent static analysis. It is not a professional human audit and does not guarantee the absence of vulnerabilities — it reduces risk, it does not eliminate it.