Doefin / Doefin-Contracts

HackenRepository at commit 862d43e

Audit

Hacken reviewed Doefin (Doefin-Contracts) on 4 Apr 2025: 19 findings, 1 critical; 17 marked fixed, 2 open.

1 critical finding, fixed
Open the reportOpen Doefin’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings19

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High004
Medium004
Low208
CriticalUnauthorized Users Can Change Crucial RolesFixed

The report gives no description here.

HighFrontrunning Attack Leading to Fund TheftFixed

The report gives no description here.

HighInvalid Block Difficulty Calculation Affects Order LogicFixed

The report gives no description here.

HighOrder Updates Does Not Take the Payout Calculation Into AccountFixed

The report gives no description here.

HighValidation Error in updateOrder Allows makerPremium to Exceed notionalFixed

The report gives no description here.

MediumDifferent Expiry Type Can Lead to Invalid Order CreationFixed

The report gives no description here.

MediumERC1155 Tokens Not Burned in deleteOrders() FunctionFixed

The report gives no description here.

MediumOrder Execution Infeasibility in Edge Case of Identical Strike ValueFixed

The report gives no description here.

MediumRemoval of Approved Tokens May Lead to Business Requirement ViolationsFixed

The report gives no description here.

LowChainlink’s latestRoundData() Function Might Return Incorrect ResultsFixed

The report gives no description here.

Show 7 more
LowFloating PragmaFixed

The report gives no description here.

LowIncompatibility With Fee-On-Transfer And Rebasing TokensFixed

The report gives no description here.

LowMissing Reentrancy ModifierFixed

The report gives no description here.

LowMissing Zero Address ChecksFixed

The report gives no description here.

LowProtocol Users Can Match Their Own OrdersFixed

The report gives no description here.

LowUnnecessary Mapping Update Increases Gas UsageFixed

The report gives no description here.

LowUnused Functions, Modifiers and VariablesFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (9)

  • https://github.com/Doefin/v1-core/src/DoefinV1BlockHeaderOracle.sol at commit 862d43eb006989bfe2ba74ef2923c272c18187b8
  • https://github.com/Doefin/v1-core/src/libraries/BlockHeaderUtils.sol at commit 862d43eb006989bfe2ba74ef2923c272c18187b8
  • https://github.com/Doefin/v1-core/src/interfaces/IDoefinV1OrderBook.sol at commit 862d43eb006989bfe2ba74ef2923c272c18187b8
  • https://github.com/Doefin/v1-core/src/interfaces/IDoefinBlockHeaderOracle.sol at commit 862d43eb006989bfe2ba74ef2923c272c18187b8
  • https://github.com/Doefin/v1-core/src/interfaces/IAdminable.sol at commit 862d43eb006989bfe2ba74ef2923c272c18187b8
  • https://github.com/Doefin/v1-core/src/DoefinV1OrderBook.sol at commit 862d43eb006989bfe2ba74ef2923c272c18187b8
  • https://github.com/Doefin/v1-core/src/DoefinV1Config.sol at commit 862d43eb006989bfe2ba74ef2923c272c18187b8
  • https://github.com/Doefin/v1-core/src/interfaces/IDoefinConfig.sol at commit 862d43eb006989bfe2ba74ef2923c272c18187b8
  • https://github.com/Doefin/v1-core/src/libraries/Errors.sol at commit 862d43eb006989bfe2ba74ef2923c272c18187b8

Part of Doefin’s security record

Doefin
Audits2 audits by 1 firmLast audit Apr 2025, by Hacken.
Critical findingsNo open critical findingsAcross the 2 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Doefin’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us