Nezha / Gambling + Farming + Staking

HackenFiles named in the report

Audit

Hacken reviewed Nezha (Nezha / Gambling + Farming + Staking) on 26 Oct 2023: 25 findings, 2 critical; 20 marked fixed, 5 open.

2 critical findings, fixed
Open the reportOpen Nezha’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings25

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical002
High105
Medium306
Low107
CriticalUnauthorized Funds DrainingFixed

The report gives no description here.

CriticalUnauthorized Funds DrainingFixed

The report gives no description here.

HighDenial of ServiceFixed

The report gives no description here.

HighHighly Permissive RoleFixed

The report gives no description here.

HighMissing ValidationFixed

The report gives no description here.

HighRequirements ViolationFixed

The report gives no description here.

HighWeak Auth SystemFixed

The report gives no description here.

MediumInconsistent ValueFixed

The report gives no description here.

MediumIncorrect ValidationFixed

The report gives no description here.

MediumMissing ValidationFixed

The report gives no description here.

Show 10 more
MediumMissing ValidationFixed

The report gives no description here.

MediumMissing ValidationFixed

The report gives no description here.

MediumMissing ValidationFixed

The report gives no description here.

LowConfusing CodeFixed

The report gives no description here.

LowFloating Language VersionFixed

The report gives no description here.

LowMissing ValidationFixed

The report gives no description here.

LowMissing ValidationFixed

The report gives no description here.

LowOutdated Solana LibrariesFixed

The report gives no description here.

LowUnformatted CodeFixed

The report gives no description here.

LowUsage Of Star ImportsFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (76)

  • nezha-vrf-lib/src/state/mod.rs
  • nezha-staking-lib/src/state/stake/balance/mod.rs
  • nezha-staking-lib/src/state/epoch/tickets.rs
  • nezha-staking-lib/src/fixed_point/mod.rs
  • nezha-staking-lib/src/state/stake_calculation.rs
  • nezha-utils/src/borsh_length/solana.rs
  • nezha-staking/src/utils.rs
  • nezha-staking/src/processor/mod.rs
  • nezha-vrf/src/entrypoint.rs
  • nezha-vrf/src/lib.rs
  • nezha-staking-lib/src/state/mod.rs
  • nezha-staking/src/processor/winners.rs
  • nezha-staking-lib/src/francium/mod.rs
  • nezha-staking-lib/src/instruction/mod.rs
  • nezha-utils/src/borsh_length/bounded_vec.rs
  • nezha-utils/src/borsh_length/option.rs
  • nezha-staking-lib/src/instruction/fns.rs
  • nezha-staking-lib/src/francium/constants.rs
  • nezha-staking-lib/src/francium/accounts.rs
  • nezha-vrf-lib/src/state/has_account_type.rs
  • nezha-utils/src/pda/mod.rs
  • nezha-utils/src/load_accounts.rs
  • nezha-utils/src/lib.rs
  • nezha-vrf-lib/src/accounts/mod.rs
  • nezha-staking/src/lib.rs
  • nezha-staking-lib/src/state/return_rate.rs
  • staking/src/lib.rs
  • nezha-utils/src/borsh_length/macros.rs
  • nezha-vrf-lib/src/state/vrf_request.rs
  • nezha-staking-lib/src/state/stake/mod.rs
  • nezha-staking/src/processor/investment/francium.rs
  • nezha-utils/src/pda/macros.rs
  • nezha-vrf/src/processor/mod.rs
  • nezha-staking-lib/src/state/winners/meta.rs
  • nezha-staking-lib/src/error/mod.rs
  • nezha-utils/src/borsh_deserialize.rs
  • nezha-staking-lib/src/state/utils.rs
  • nezha-vrf/src/processor/rotate_key.rs
  • nezha-vrf-lib/src/instruction/mod.rs
  • nezha-utils/src/account_meta.rs
  • nezha-staking/src/processor/stake_update.rs
  • nezha-vrf-lib/src/utils.rs
  • nezha-staking/src/solana.rs
  • nezha-utils/src/pda/seed_component.rs
  • nezha-utils/src/checks.rs
  • nezha-staking-lib/src/state/winners/page.rs
  • nezha-staking-lib/src/state/epoch/mod.rs
  • nezha-utils/src/borsh_length/primitives.rs
  • nezha-vrf-lib/src/switchboard.rs
  • nezha-vrf-lib/src/error/conversions.rs
  • nezha-staking-lib/src/lib.rs
  • nezha-vrf-lib/src/instruction/fns.rs
  • nezha-vrf-lib/src/accounts/account_type.rs
  • nezha-utils/src/borsh_length/bounded_string.rs
  • nezha-staking-lib/src/error/conversions.rs
  • nezha-utils/src/borsh_length/array.rs
  • nezha-staking-lib/src/accounts/account_type.rs
  • nezha-utils/src/pda/small_vec.rs
  • nezha-staking-lib/src/state/winners/mod.rs
  • nezha-staking/src/processor/investment/returns.rs
  • nezha-staking/src/processor/investment/mod.rs
  • nezha-staking-lib/src/state/epoch/status.rs
  • nezha-staking-lib/src/state/stake_update.rs
  • nezha-staking/src/entrypoint.rs
  • nezha-vrf-lib/src/state/program_state.rs
  • nezha-staking-lib/src/accounts/mod.rs
  • nezha-vrf-lib/src/lib.rs
  • nezha-staking/src/processor/investment/manual.rs
  • nezha-vrf-lib/src/accounts/verify.rs
  • nezha-vrf/src/processor/switchboard.rs
  • nezha-vrf-lib/src/error/mod.rs
  • nezha-staking-lib/src/accounts/pda.rs
  • nezha-staking-lib/src/francium/instruction.rs
  • nezha-utils/src/borsh_length/mod.rs
  • nezha-vrf/src/utils.rs
  • nezha-vrf/src/switchboard.rs

Part of Nezha’s security record

Nezha
Audits1 audit by 1 firmLast audit Oct 2023, by Hacken.
Critical findingsNo open critical findingsIn that report, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Nezha’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us