AIOil Security Shield — Scan Verification
Scan ID: fcedbde98d487709 · 2026-07-20T11:30:07.952Z · code hash b86d69929bc52849ef0616a083d6dd4b25d4a5ed6b8e7f93b6ffc1457d8fe6ff
Verdict: Vulnerabilities found — review required before deployment
Critical 0 · High 1 · Medium 0 · Low 0
High — Fee calculation relies on user-provided trade_value_lamports without verification. In `execute_swap_with_fee`, the fee amount is computed from `trade_value_lamports`, which is entirely controlled by the caller. The program has no oracle or cross-instruction verification to confirm the actual swap value. An attacker can supply a small or zero `trade_value_lamports` to pay little or no fee while executing a much larger swap in the same transaction.
AIOil Devnet
Not tested on AIOil Devnet.
Download full report (Markdown) ↓
AIOil Security Shield runs automated, multi-agent static analysis. It is not a professional human audit and does not guarantee the absence of vulnerabilities — it reduces risk, it does not eliminate it.