Nya / Nya Exchange

Hacken10 Oct 20245 addresses on 5 chains

Hacken reviewed NYA (Nya Exchange) on 10 Oct 2024: 17 findings, 0 critical; 15 marked fixed, 2 open.

No open critical findings

Open NYA’s security record

The original report was removed from its address (seen 15 Oct 2026).

Trustblock does not review code.

Findings17

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	3
Low	2	0	12

MediumIncompatibility with Non-Standard ERC20 Tokens (e.g., USDT) Leads to Order Execution FailureFixed

The report gives no description here.

MediumMisdirected Maker Relayer Fee in executeFundsTransfer Burdens Seller with Unintended FeesFixed

The report gives no description here.

MediumOrder Execution Failure for Native Currency Transactions Due to Use of .sendFixed

The report gives no description here.

LowFloating PragmaFixed

The report gives no description here.

LowLack of Delay in startGrantAuthentication in ProxyRegistry.sol May Lead to Unauthorized AccessFixed

The report gives no description here.

LowLegacy execute Function Not Removed After MigrationFixed

The report gives no description here.

LowMissing Events For Critical DataFixed

The report gives no description here.

LowMissing Revert Messages in require StatementsFixed

The report gives no description here.

LowMissing SPDX-License-IdentifierFixed

The report gives no description here.

LowMissing Storage Gaps Can Lead to Storage Collision in Upgradeable ContractsFixed

The report gives no description here.

Show 5 more

LowPresence of Unused Internal approveOrder Function and Inaccessible Order Approval MechanismFixed

The report gives no description here.

LowToken Transfer in executeFundsTransfer Occurs After Fee Deductions, Contradicting Intended LogicFixed

The report gives no description here.

LowUnnecessary Initialization of Variables to Default ValuesFixed

The report gives no description here.

LowUnused sizeOf Function Remains in CodebaseFixed

The report gives no description here.

LowUse of Generic uint Type Instead of Explicitly Sized Integer Types (e.g. uint256)Fixed

The report gives no description here.

Contracts in scope5

Address	Chain	Source code
0x38f9bf9dce51833ec7f03c9dc218197999999999	Chain: Ethereum	Source code: Verified source
0x38f9bf9dce51833ec7f03c9dc218197999999999	Chain: Arbitrum	Source code: Verified source
0x38f9bf9dce51833ec7f03c9dc218197999999999	Chain: BNB Chain	Source code: Verified source
0x38f9bf9dce51833ec7f03c9dc218197999999999	Chain: Polygon (POS)	Source code: Verified source
0x38f9bf9dce51833ec7f03c9dc218197999999999	Chain: Base	Source code: Verified source

Part of NYA’s security record

NYA

Audits1 audit by 1 firmLast audit Oct 2024, by Hacken.

Critical findingsNo open critical findingsIn 1 report.

Open NYA’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.