Rain / Prediction Markets

HackenFiles named in the report

Audit

Hacken reviewed RAIN (Rain / Prediction Markets) on 5 Jun 2026: 49 findings, 0 critical; 40 marked fixed, 8 acknowledged, 1 open.

No open critical findings
Open the reportOpen RAIN’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings49

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High012
Medium048
Low1330
HighPush Transfer to OB Maker Blocks Book on BlacklistAcknowledged

The report gives no description here.

MediumAI-Resolved Pool Funds Lock If chooseWinner Never CalledAcknowledged

The report gives no description here.

MediumPermissionless Pool Creation Allows Blacklisted poolOwner or referrer to Lock All Pool FundsAcknowledged

The report gives no description here.

MediumUniswap Reverts in openDispute Trap Pool in Disputed StateAcknowledged

The report gives no description here.

MediumUnnecessary 1% Slippage Buffer in createPool Permanently Locks Excess oracleFixedFee FundsAcknowledged

The report gives no description here.

LowHardcoded 1e6 Minimum-Order Floor Breaks on Non-6-Decimal Quote TokenAcknowledged

The report gives no description here.

LoworacleFactoryAddress Mutability Silently Affects All Pre-Existing Pools' Appeal FlowsAcknowledged

The report gives no description here.

LowPermissionless createRainDiamond Allows Off-Deployer Pool Deployment With Attacker-Supplied FacetsAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (23)

  • src/shared/Constants.sol
  • src/libraries/helpers/SafeMath.sol
  • src/diamond/RainPoolDiamond.sol
  • src/diamond/facets/DisputeFacet.sol
  • src/RainDeployer.sol
  • src/diamond/facets/InfoFacet.sol
  • src/diamond/libraries/LibDiamond.sol
  • src/diamond/facets/TradingFacet.sol
  • src/utils/Globals.sol
  • src/diamond/libraries/PathKey.sol
  • src/diamond/facets/GetterFacet.sol
  • src/diamond/facets/CancelOrderFacet.sol
  • src/diamond/facets/ResolutionFacet.sol
  • src/diamond/libraries/LibUtils.sol
  • src/diamond/facets/DiamondCutFacet.sol
  • src/libraries/helpers/UniswapV2Library.sol
  • src/RainDiamondFactory.sol
  • src/diamond/shared/Types.sol
  • src/libraries/LinkedList.sol
  • src/diamond/facets/OracleFeeFacet.sol
  • src/diamond/facets/DiamondLoupeFacet.sol
  • src/diamond/facets/ClaimFacet.sol
  • src/diamond/facets/SplitMergeFacet.sol

Part of RAIN’s security record

RAIN
Audits2 audits by 1 firmLast audit Jun 2026, by Hacken.
Critical findingsNo open critical findingsAcross 2 reports.
Open RAIN’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us