Galileo Protocol / Marketplace + Escrow
Hacken reviewed Galileo (Galileo Protocol / Marketplace + Escrow) on 30 Apr 2024: 38 findings, 9 critical; 33 marked fixed, 5 open.
Report hosted on hacken.io.
Trustblock does not review code.
Findings38
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 2 | 0 | 7 |
| High | 2 | 0 | 3 |
| Medium | 0 | 0 | 3 |
| Low | 1 | 0 | 20 |
CriticalIncorrect royalty calculation for multiple NFTsFixed
The report gives no description here.
CriticalLost shipment fee in NFT purchaseFixed
The report gives no description here.
CriticalPotential for frontrunning in _recover functionFixed
The report gives no description here.
CriticalSkipping elements in for loopFixed
The report gives no description here.
CriticalUnauthorized listing of NFTsFixed
The report gives no description here.
CriticalUnnecessary token id validationFixed
The report gives no description here.
CriticalUser pay tax twice in _buyNFT functionFixed
The report gives no description here.
HighInconsistent state in redeem function of GalileoMarketplace contractFixed
The report gives no description here.
HighPotential DoS in the _serialRoyalty()Fixed
The report gives no description here.
HighUnused referral informationFixed
The report gives no description here.
Show 10 more
MediumAvoidance of royalties and fees in NFT listingFixed
The report gives no description here.
MediumPotential DoS due to excessive Gas consumptionFixed
The report gives no description here.
MediumUnauthorized burning of NFTsFixed
The report gives no description here.
LowChecks-Effects-Interactions pattern violationFixed
The report gives no description here.
LowDouble call of setApprovalForAll() in mint functionFixed
The report gives no description here.
LowFloating pragmaFixed
The report gives no description here.
LowInaccurate escrow time validationFixed
The report gives no description here.
LowInefficient function visibilityFixed
The report gives no description here.
LowMisleading onlyOwnerOrAdmin modifier nameFixed
The report gives no description here.
LowMissing checks for the zero addressFixed
The report gives no description here.
Show 10 more
LowMissing fee validation in setFee() functionFixed
The report gives no description here.
LowMissing feePercent validation in __GalileoMarketplace_init functionFixed
The report gives no description here.
LowMissing parameters length validation in multipleMint() functionFixed
The report gives no description here.
LowMissing price validation in changePrice() functionFixed
The report gives no description here.
LowPotential DOS due to lack of upper bound for feesFixed
The report gives no description here.
LowRedundant address validationFixed
The report gives no description here.
LowRedundant importsFixed
The report gives no description here.
LowRedundant require statement in getReferralFee functionFixed
The report gives no description here.
LowReentrancyGuardUpgradeable is not initializedFixed
The report gives no description here.
LowStyle guide violationFixed
The report gives no description here.
Show 3 more
LowUnchecked return valueFixed
The report gives no description here.
LowUnnecessary variable initializationFixed
The report gives no description here.
LowUnused roleFixed
The report gives no description here.
Contracts in scope1
| Address | Chain | Source code |
|---|---|---|
| 0xa444ec96ee01bb219a44b285de47bf33c3447ad5 | Chain: Ethereum | Source code: Verified source |
Part of Galileo’s security record
Security firm
Hacken343 projects reviewed · 476 reports · latest Sep 2026
See Hacken’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us