lingoToken
Cantina reviewed Lingo (lingoToken) on 14 Apr 2025: 4 findings, 3 critical; all marked fixed.
3 critical findings, fixed
Open the reportOpen Lingo’s security record
Report hosted on cantina.xyz.
Trustblock does not review code.
Findings4
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 3 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 0 | 0 |
CriticalAttacker can become the authority of the config accountFixed
The report gives no description here.
CriticalInsufficient validations allow attackers to steal by increasing refundable fee amount without any transfer feesFixed
The report gives no description here.
CriticalMissing instruction to collect transfer fees accumulated in delegate_token_accountFixed
The report gives no description here.
MediumAny token account owned by delegate can be usedFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Lingo’s security record
LingoAudits2 audits by 2 firmsLast audit Apr 2025, by Cantina.
Critical findingsNo open critical findingsAcross the 2 reports, 3 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Lingo’s security recordSecurity firm
Cantina37 projects reviewed · 175 reports · latest Oct 2026
See Cantina’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us