Hedgey Token Lockup and Vesting Plans

Off-Chain (Private)

Audited on 2023/05/31

Rekt reported

Summary

Executive Summary This report presents the results of our engagement with Hedgey to review Token Lockup and Vesting Plans. The review was conducted over four weeks, from June 26, 2023 to July 21, 2023, by Chingiz Mardanov and David Braun. A total of 29 person-days were spent. Scope Our review focused on the commit hash 6a5ff58c2e83015b83c8de15f1cc61e9ac58f2c7. The list of files in scope can be found in the Appendix. Update: August 3rd - Mitigations The report was updated to reflect mitigations implemented in commit hash f4299cdba5e863c9ca2d69a3a7dd554ac34af292, 3544f6ad5a586bcbbd31f1d136a054bd548d0c3a, 02512711aff5ff6dfcdecba2b89c82b54e0a6db8, 135297b9a7017d1eb9a7ee473c6fe27ce166cbe7 and 8c7679c7526c29980c6255127c0cd0ba85d000fa.

Project

Hedgey

Multi-Chain

Issues (11)

	Low	Medium	High	Critical	Total
Not fixed	2	1	-	-	3
Fixed	8	-	-	-	8
Total	10	1	0	0	11

Contracts (18)

#	File Name
11	contracts/LockupPlans/NonTransferable/TokenLockupPlans_Bound.sol
12	contracts/VestingPlans/TokenVestingPlans.sol
13	contracts/interfaces/IDelegateNFT.sol
14	contracts/Periphery/BatchPlanner.sol
15	contracts/interfaces/IVestingPlans.sol
16	contracts/sharedContracts/URIAdmin.sol
17	contracts/libraries/TimelockLibrary.sol
18	contracts/ERC721Delegate/ERC721Delegate.sol

#	File Name
11	contracts/LockupPlans/NonTransferable/TokenLockupPlans_Bound.sol
12	contracts/VestingPlans/TokenVestingPlans.sol
13	contracts/interfaces/IDelegateNFT.sol
14	contracts/Periphery/BatchPlanner.sol
15	contracts/interfaces/IVestingPlans.sol
16	contracts/sharedContracts/URIAdmin.sol
17	contracts/libraries/TimelockLibrary.sol
18	contracts/ERC721Delegate/ERC721Delegate.sol

Hedgey Token Lockup and Vesting Plans

Summary

Issues (11)

Lockup Plans Are Not Well Suited for Trading on Traditional OTC Platformsnot_fixed/medium

Refactor Large Functions for Readabilitynot_fixed/low

Use Custom Errors to Save Gasnot_fixed/low

Contracts (18)