Onchain Foundation / Mintdash Contracts

HackenFiles named in the report

Hacken reviewed Onchain Foundation (Onchain Foundation / Mintdash Contracts) on 19 Mar 2025: 10 findings, 0 critical; 6 marked fixed, 4 open.

No open critical findings
Open the reportOpen Onchain Foundation’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings10

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium100
Low306
LowInsufficient Validation of Royalty Percentage in _updateRoyalties() functionFixed

The report gives no description here.

LowMissing Array Length Validation in airdrop() Function Can Cause Out-of-Bounds ErrorsFixed

The report gives no description here.

LowMissing maxSupply Enforcement in mint() Function Allows Exceeding Token Supply LimitFixed

The report gives no description here.

LowMissing Validation for Empty merkleRoot in Allowlist MintingFixed

The report gives no description here.

LowMissing Zero Address ValidationFixed

The report gives no description here.

LowRedundant NatSpec Parameters in DropStructs.solFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (9)

  • core/interface/IPayout.sol
  • core/interface/IERC721DropMetadata.sol
  • lib/DropStructs.sol
  • core/Payout.sol
  • ERC721Drop.sol
  • interface/IERC721Drop.sol
  • core/ERC721DropMetadata.sol
  • ERC721DropMinter.sol
  • interface/IERC721DropMinter.sol

Part of Onchain Foundation’s security record

Onchain Foundation
Audits1 audit by 1 firmLast audit Mar 2025, by Hacken.
Critical findingsNo open critical findingsIn 1 report.
Open Onchain Foundation’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us