Spool Arbitrum security review

HexensCode version: not recorded (see the report)

Hexens reviewed Spool (Spool Arbitrum security review) on 26 Apr 2024: 7 findings, 0 critical; 3 marked fixed, 4 acknowledged.

No open critical findings
Open the reportOpen Spool’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium022
Low020
MediumLack of slippage protection in _compoundAcknowledged

The report gives no description here.

MediumUsage of hardcoded lockDuration may lead to loss of extra rewardsAcknowledged

The report gives no description here.

Low_compound doesn't use return value of _getProtocolRewardsInternalAcknowledged

The report gives no description here.

LowUsing block.timestamp as deadlineAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Spool’s security record

Spool
Audits10 audits by 2 firmsLast audit Sep 2024, by Hexens.
Critical findingsNo open critical findingsAcross the 10 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open Spool’s security record

Security firm

Hexens

32 projects reviewed · 75 reports · latest Jul 2026

See Hexens’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us