Taco Studios
CredShields reviewed Taco Studios on 6 Aug 2025: 10 findings, 2 critical; 7 marked fixed, 3 acknowledged.
2 critical findings, fixed
Open the reportOpen Taco Studios’s security record
Report hosted on GitHub.
Trustblock does not review code.
Findings12
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 1 | 0 |
| Medium | 0 | 2 | 2 |
| Low | 0 | 0 | 3 |
CriticalCollection Owners and Sellers Receive Incorrect Royalty Amounts Due to Flawed Fee Calculation LogicFixed
The report gives no description here.
CriticalMalicious Collection Owners Can Set Excessive Royalty Rates That Effectively Steal Seller ProceedsFixed
The report gives no description here.
MediumAttacker can front-run initialization to gain unauthorized ownership of the marketplace contractFixed
The report gives no description here.
MediumDenial Of Service To Legitimate Sellers Through Unbounded Array IterationFixed
The report gives no description here.
LowBuyer can accidentally overpay by sending ETH during ERC20 token purchasesFixed
The report gives no description here.
LowMissing events in important functionsFixed
The report gives no description here.
LowMissing zero address validationsFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Taco Studios’s security record
Taco StudiosAudits1 audit by 1 firmLast audit Nov 2025, by CredShields.
Critical findingsNo open critical findingsIn that report, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Taco Studios’s security recordSecurity firm
CredShields45 projects reviewed · 58 reports · latest Oct 2026
See CredShields’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us