Merlin Protocol / DAO

Hacken25 Apr 2024Files named in the report

Hacken reviewed Merlin Protocol (Merlin Protocol / DAO) on 25 Apr 2024: 28 findings, 0 critical; 22 marked fixed, 6 open.

No open critical findings

Open the report Open Merlin Protocol’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings28

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	3
Medium	0	0	8
Low	6	0	11

LowExternally Added Funds Could Be StolenOpen

The report gives no description here.

LowFluctuations In Stablecoins Might Cause Inconsistent Price CalculationsOpen

The report gives no description here.

LowMissing Else BlockOpen

The report gives no description here.

LowNaming Could Be ImprovedOpen

The report gives no description here.

Lowswap() Function Does Not Check If The Fund Is ValidOpen

The report gives no description here.

LowThe Contract Should approve(0) FirstOpen

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (13)

MerlinERC20.sol
SwapController.sol
RebalanceController.sol
MerlinFundModifier.sol
Lock.sol
TestFund.sol
BasketsController.sol
MerlinFaucet.sol
MerlinFund.sol
TokenAllocationController.sol
Timelock.sol
MerlinFundAdministrative.sol
MerlinGovernor.sol

Part of Merlin Protocol’s security record

Merlin Protocol

Audits2 audits by 2 firmsLast audit Apr 2024, by Hacken.

Critical findingsNo open critical findingsAcross 2 reports.

Open Merlin Protocol’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.