Unizen / Unizen-Trade-Aggregator

Hacken2 addresses on Ethereum and Polygon (POS)

Audit

Hacken reviewed Unizen (Unizen-Trade-Aggregator) on 27 Nov 2024: 35 findings, 1 critical; 18 marked fixed, 17 open.

1 critical finding, fixed
Open the reportOpen Unizen’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings35

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High002
Medium104
Low16011
MediumExposed API Keys in Hardhat Configuration FileOpen

The report gives no description here.

LowDeviation from EIP-712 Standards and Best Practices in GasLessExecutor ContractOpen

The report gives no description here.

LowFloating PragmaOpen

The report gives no description here.

LowHardcoded Gas Subtraction Leading to Potential Reverts and Unreliable ExecutionOpen

The report gives no description here.

LowIncomplete Validation in Cross-Chain Swap Functionality in the StargateThorchainExecutorOpen

The report gives no description here.

LowInefficient Fee Handling in _takeIntegratorFee FunctionOpen

The report gives no description here.

LowLack of _disableInitializers() Call in Constructor of Upgradeable Contracts Exposes System to Unauthorized InitializationOpen

The report gives no description here.

LowMissing Array Length Validation in Loop StructuresOpen

The report gives no description here.

LowMissing Check for Source and Destination Token Equality in Swap FunctionsOpen

The report gives no description here.

LowMissing Events in Sensitive FunctionsOpen

The report gives no description here.

Show 7 more
LowMissing Storage Gaps for Upgradeable ContractsOpen

The report gives no description here.

LowMissing Zero Address ChecksOpen

The report gives no description here.

LowPotential Fee Collection Failure Due to Discrepancies in Fee TrackingOpen

The report gives no description here.

LowPotential Overflow and Gas Limit Issues in _swap FunctionOpen

The report gives no description here.

LowRedundant and Duplicate Imports Across ExecutorOpen

The report gives no description here.

LowUnrestricted Fee Setting Allows Excessive Fees and Potential Transaction Reverts in deposit FunctionOpen

The report gives no description here.

LowUse of Outdated and Floating OpenZeppelin Contract DependenciesOpen

The report gives no description here.

Contracts in scope2

AddressChainSource code
Chain: EthereumSource code: Verified source
Chain: Polygon (POS)Source code: Verified source

Part of Unizen’s security record

Unizen
Audits2 audits by 1 firmLast audit Feb 2025, by Hacken.
Critical findingsNo open critical findingsAcross the 2 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
IncidentIncident 8 Mar 2024Source: De.Fi incident database.
Open Unizen’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us