Fabstir / Marketplace
Hacken reviewed Fabstir (Fabstir / Marketplace) on 16 Mar 2026: 41 findings, 0 critical; 24 marked fixed, 12 acknowledged, 5 open.
Report hosted on hacken.io.
Trustblock does not review code.
Findings41
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 4 |
| Medium | 2 | 2 | 7 |
| Low | 3 | 10 | 13 |
MediumUnregistered or Slashed Hosts Can Continue Operating in Active SessionsAcknowledged
The report gives no description here.
MediumUser Funds Unexpectedly Locked for VoteAcknowledged
The report gives no description here.
LowBlacklisted Proposer Permanently Blocks Model Execution and Re-ProposalsAcknowledged
The report gives no description here.
LowCode Duplication in createSessionFromDeposit()Acknowledged
The report gives no description here.
LowDelegate Authorization State Can Be Stale and MisleadingAcknowledged
The report gives no description here.
LowDelegate Cannot Complete or Manage Sessions They CreatedAcknowledged
The report gives no description here.
LowDelegate Configuration Limited to Single Host/Model — No Multi-Config Support Per DelegateAcknowledged
The report gives no description here.
LowHost Can Unregister During Active Sessions and Withdraw Stake While Continuing to EarnAcknowledged
The report gives no description here.
LowMissing Zero-Address Checks Across ContractsAcknowledged
The report gives no description here.
LowNo Function to Remove or Disable an Accepted TokenAcknowledged
The report gives no description here.
Show 2 more
LowRedundant usdcAddress State Variable and Setter Introduce Unnecessary ComplexityAcknowledged
The report gives no description here.
LowsetMinTokensFee Function Has No Upper BoundAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (7)
- src/ModelRegistryUpgradeable.sol
- src/NodeRegistryWithModelsUpgradeable.sol
- src/utils/ReentrancyGuardUpgradeable.sol.
- src/JobMarketplaceWithModelsUpgradeable.sol
- src/HostEarningsUpgradeable.sol
- src/interfaces/UserOperation.sol
- src/ProofSystemUpgradeable.sol
Part of Fabstir’s security record
FabstirSecurity firm
Hacken343 projects reviewed · 476 reports · latest Sep 2026
See Hacken’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us