Guess Meme Rust
Audit · firm’s term: audit report
QuillAudits reviewed Guess Meme Rust on 26 Feb 2025: 8 findings, 0 critical; 2 marked fixed, 6 open.
Report hosted on quillaudits.com.
Trustblock does not review code.
Findings8
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 3 | 0 | 1 |
| Medium | 3 | 0 | 0 |
| Low | 0 | 0 | 1 |
HighMissing Token Account Owner Validation CheckFixed
The buy and sell functions don't properly validate that the token accounts provided belong to the expected owners. This could allow attackers to pass in token accounts they don't own or manipulate the transaction with incorrect token accounts. There is no check during Account declaration or when users interact with these functions.
LowNo event emission for the withdraw operationFixed
The withdraw instruction, which handles the final withdrawal of SOL and any remaining tokens after bonding curve completion, lacks event emission for transparency and off-chain tracking.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
- lib.rs
Part of Guess Meme Rust’s security record
Security firm
QuillAudits350 projects reviewed · 459 reports · latest Apr 2025
See QuillAudits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us