Critical Findings

Locked Fees in Vault Due to Lack of Withdraw Function

Severity: Critical

Ecosystem: Aptos

Protocol: Kofi Finance

Auditor: Zenith

Report: https://github.com/KofiFinance/audits/blob/main/Kofi%20Finance%20-%20Zenith%20Audit%20Report.pdf

Report Date: May 2025

Description:

The protocol implements a deposit fees function, but there is no corresponding withdraw fees function.