Trueo Final Report Updated
Audit · firm’s term: security review
Guardian Audits reviewed Trueo (Trueo Final Report Updated) on 8 Mar 2025: 39 findings, 1 critical; 10 marked fixed, 27 acknowledged, 2 open.
Findings39
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 2 | 4 |
| Medium | 2 | 6 | 5 |
| Low | 0 | 19 | 0 |
HighSecond Challenge Period Can Be BypassedAcknowledged
The report gives no description here.
HighToken Holder Vote Cannot Be DisputedAcknowledged
The report gives no description here.
MediumDisputer Cannot Re-Dispute After ResetAcknowledged
The report gives no description here.
MediumDoS In Dispute Process USDC Is PausedAcknowledged
The report gives no description here.
MediumInefficient Distribution In StakingRewardsAcknowledged
The report gives no description here.
MediumLacking Incentives For The EscalatorAcknowledged
The report gives no description here.
MediumPossible DOS In _getTotalOpenDisputesAcknowledged
The report gives no description here.
MediumRisk Of Re-org AttackAcknowledged
The report gives no description here.
LowAccess Control Naming ConventionAcknowledged
The report gives no description here.
LowBlock In _isValidTransition Never TriggeredAcknowledged
The report gives no description here.
Show 10 more
LowBond Amounts Not ValidatedAcknowledged
The report gives no description here.
LowClear Data After Removing Council MemberAcknowledged
The report gives no description here.
LowClear Data After Removing PauserAcknowledged
The report gives no description here.
LowDisputes Allow Potential AbuseAcknowledged
The report gives no description here.
LowIncorrect createdAt Timestamp In EscalationsAcknowledged
The report gives no description here.
LowIncorrect TrueToken maxSupplyAcknowledged
The report gives no description here.
LowMarket Creation Lacks Input ValidationAcknowledged
The report gives no description here.
LowMarkets Can Be Created And Cancelled For ProfitAcknowledged
The report gives no description here.
LowMax Council Members Can Be ViolatedAcknowledged
The report gives no description here.
LowMismatched Event Parameter OrderAcknowledged
The report gives no description here.
Show 7 more
LowMissing setPaused Function In Market ManagerAcknowledged
The report gives no description here.
LowOracleCouncil Can't Pause/Unpause MarketManagerAcknowledged
The report gives no description here.
LowPotential Griefing To Mint TransactionsAcknowledged
The report gives no description here.
LowReset By Council Cannot Be EscalatedAcknowledged
The report gives no description here.
LowresolveEscalatedDispute Lacks Input ValidationAcknowledged
The report gives no description here.
LowsetEndOfTrading Lacks Input ValidationAcknowledged
The report gives no description here.
LowToken Loss Via Truncation In Burn() FunctionAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Trueo’s security record
TrueoSecurity firm
Guardian Audits15 projects reviewed · 99 reports · latest Aug 2026
See Guardian Audits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us