Audit Report
Paladin reviewed Hexagon Finance (Audit Report) on 29 Apr 2022: 55 findings, 0 critical; 39 marked fixed, 9 acknowledged, 7 open.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings55
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 1 | 5 |
| Medium | 0 | 2 | 5 |
| Low | 6 | 6 | 29 |
HighUsers might not be able to leave the vesting contract due to the large memory caching of arrays and iterationsAcknowledged
The report gives no description here.
MediumrewardDebt is vulnerable to rounding driftAcknowledged
The report gives no description here.
MediumVarious variables will affect user rewards in hindsight if ever changed by governanceAcknowledged
The report gives no description here.
LowContract should inherit IBoostAcknowledged
The report gives no description here.
LowGovernance Privilege: The function reclaimTokens allow the contract owner to withdraw any reward tokens to any addressAcknowledged
The report gives no description here.
LowsetFlakePerSecond has no maximum safeguardAcknowledged
The report gives no description here.
LowsetRewardPerSecond has no maximum safeguardAcknowledged
The report gives no description here.
LowUnnecessary marking of allocPoint to uint256 and casting to uint64Acknowledged
The report gives no description here.
LowVariables can be cached within transferFromAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Hexagon Finance’s security record
Hexagon FinanceSecurity firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us