Universal / Universal-Solana

HackenFiles named in the report

Audit

Hacken reviewed Universal (Universal-Solana) on 8 May 2025: 9 findings, 0 critical; 8 marked fixed, 1 open.

No open critical findings
Open the reportOpen Universal’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium000
Low107
HighMint Limit Bypass due to Unsafe DowncastingFixed

The report gives no description here.

LowInstruction Contexts DuplicationFixed

The report gives no description here.

LowLack of Zero Price PreventionFixed

The report gives no description here.

LowMissing Account is Writable ConstraintFixed

The report gives no description here.

LowMutable Reference of Readonly StructureFixed

The report gives no description here.

LowRedundant Account is Writable ConstraintsFixed

The report gives no description here.

LowRedundant Deadline & Nonce FunctionalityFixed

The report gives no description here.

LowRedundant State FieldFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (11)

  • programs/universal-sol/src/instructions/mod.rs
  • programs/universal-sol/src/state/actor.rs
  • programs/universal-sol/src/state/mod.rs
  • programs/universal-sol/src/state/asset.rs
  • programs/universal-sol/src/lib.rs
  • programs/universal-sol/src/instructions/assets.rs
  • programs/universal-sol/src/constants.rs
  • programs/universal-sol/src/instructions/actors.rs
  • programs/universal-sol/src/utils.rs
  • programs/universal-sol/src/errors.rs
  • programs/universal-sol/src/state/nonce.rs

Part of Universal’s security record

Universal
Audits1 audit by 1 firmLast audit May 2025, by Hacken.
Critical findingsNo open critical findingsIn 1 report.
Open Universal’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us