TokenTable - Fractionalizer and SellNow
Audit · firm’s term: security assessment
CODESPECT reviewed TokenTable (TokenTable - Fractionalizer and SellNow) on 10 Apr 2025: 9 findings, 1 critical; 8 marked fixed, 1 open.
Trustblock does not review code.
Findings9
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 4 |
| Medium | 0 | 0 | 1 |
| Low | 1 | 0 | 2 |
CriticalisApprovedForAll mapping allows arbitrary transfer of any segmentFixed
The report gives no description here.
HighAggregator does not approve token spendingFixed
The report gives no description here.
Highapproved segments don’t reset their approval after being transferredFixed
The report gives no description here.
HighFees not considered in expectedAmount inside BuyerAggregatorFixed
The report gives no description here.
HighNative ETH is not supported by SellNow contractFixed
The report gives no description here.
MediumDOS in BuyerAggregator’s confirm functionFixed
The report gives no description here.
LowDisallow aggregator withdrawals once the buyer side is confirmedFixed
The report gives no description here.
LowUse call(...) instead of transfer(...)Fixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (2)
- https://github.com/EthSign/tokentable-sellnow-ft-fractionalizer-evm/tree/3f3a670c0f67983a0dd3acbec5e0eeee11e1806d/src
- https://github.com/EthSign/tokentable-sellnow-swap-evm/tree/8aadc1d34c8e402996c240c993a1b75c465d13ab/src
Part of TokenTable’s security record
TokenTableSecurity firm
CODESPECT4 projects reviewed · 10 reports · latest Apr 2025
See CODESPECT’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us