Re / Re-Defi
Hacken reviewed Re Protocol (Re / Re-Defi) on 4 Sep 2024: 29 findings, 0 critical; all marked fixed.
Report hosted on hacken.io.
Trustblock does not review code.
Findings29
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 4 |
| Low | 0 | 0 | 25 |
MediumDenial of Service While Acquiring Oracle Data in rebalance FunctionFixed
The report gives no description here.
MediumPotential Denial of Service in rebalance FunctionFixed
The report gives no description here.
MediumPotential Stale Data Usage in rebalance FunctionFixed
The report gives no description here.
MediumThe Pool Deposit Amount Requirement Can Be BypassedFixed
The report gives no description here.
LowAssumption of ASCII Encoding in bytesToUint FunctionFixed
The report gives no description here.
LowChecks Effects Interactions Pattern ViolationFixed
The report gives no description here.
LowCode Contains Development Library ImportFixed
The report gives no description here.
LowEncoding in bytesToUint Function Leading to Supply Cap BypassFixed
The report gives no description here.
LowInaccurate Check in the addToWithdrawQueue FunctionFixed
The report gives no description here.
LowInconsistent Metrics Due to Missing Decrement in cancelRedeemRequest FunctionFixed
The report gives no description here.
Show 10 more
LowIncorrect Error MessageFixed
The report gives no description here.
LowIncorrect Handling of Minimum int256 Value in abs FunctionFixed
The report gives no description here.
LowInefficient Gas Usage Due to Repeated Storage Reads of redeemRequestFixed
The report gives no description here.
LowLack of Validation for feePercentage in setFeePercentage FunctionFixed
The report gives no description here.
LowLack of Validation for Over-Returning Capital in returnProfitAndCapital FunctionFixed
The report gives no description here.
LowLack of Validation for Retrieved Balances in fulfillRequest FunctionFixed
The report gives no description here.
LowMisleading Function Name claimRewardFromPoolFixed
The report gives no description here.
LowMissing Fulfillment Status UpdateFixed
The report gives no description here.
LowMissing Zero Address ValidationFixed
The report gives no description here.
LowOperator Can Frontrun PricesFixed
The report gives no description here.
Show 9 more
LowRedundant ImportFixed
The report gives no description here.
LowRequirements Violation - Implementation Documentation MismatchFixed
The report gives no description here.
LowSingle-step Ownership TransferFixed
The report gives no description here.
LowState Variables Only Set in The Constructor Should Be Declared `immutable`Fixed
The report gives no description here.
LowThe Unlock Function Should Revert If The Pool Is Already DeployedFixed
The report gives no description here.
LowTODO Left in the codeFixed
The report gives no description here.
LowUnclaimed Deposit Fees Are Often Unaccounted For When Moving FundsFixed
The report gives no description here.
LowUnsafe ERC20 TransfersFixed
The report gives no description here.
LowUnused State VariablesFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (26)
- IKYCRegistry.sol
- KYCRegistry.sol
- SupplyOracleFunctions.sol
- MembershipFeeRegistry.sol
- Executor.sol
- ISingleOracleFunctions.sol
- PrivatePool.sol
- ConvertDecimals.sol
- IInsuranceCapitalLayer.sol
- Pool.sol
- Math.sol
- USDRE.sol
- ISupplyOracleFunctions.sol
- USDRWA.sol
- StableCoinManager.sol
- IDecentralizedFund.sol
- IPool.sol
- SingleOracleFunctions.sol
- PoolToken.sol
- ReToken.sol
- IStableCoinManager.sol
- InsuranceCapitalLayer.sol
- ICell.sol
- PrivateInsuranceCapitalLayer.sol
- Cell.sol
- DecentralizedFund.sol
Part of Re Protocol’s security record
Re ProtocolSecurity firm
Hacken343 projects reviewed · 476 reports · latest Sep 2026
See Hacken’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us