Xgame / Crash Monorepo

HackenFiles named in the report

Audit

Hacken reviewed XGame (Xgame / Crash Monorepo) on 19 Aug 2025: 15 findings, 0 critical; 12 marked fixed, 3 acknowledged.

No open critical findings
Open the reportOpen XGame’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings15

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium003
Low039
MediumNo Replay Protection in transfer() Allows Reuse of SignaturesFixed

The report gives no description here.

MediumPotential Underflow in pendingWins When Losses Outweigh Wins in Crash GameFixed

The report gives no description here.

MediumUser Can Over Stake When Upgrading TierFixed

The report gives no description here.

LowMisleading CommentFixed

The report gives no description here.

LowMissing Event Emissions in Crucial PlacesFixed

The report gives no description here.

LowMissing Input Token Validation in PathFixed

The report gives no description here.

LowOptimize _validatePriceTwa to Avoid Passing Unused Hops ElementsFixed

The report gives no description here.

LowRedundant Constant VariablesFixed

The report gives no description here.

LowRedundant ErrorFixed

The report gives no description here.

LowRefactor Repeated Deadline ChecksFixed

The report gives no description here.

Show 2 more
LowStale Oracle Price Signature Can Be ReusedFixed

The report gives no description here.

LowTypos in Event VariablesFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (14)

  • lib/Constants.sol
  • lib/uniswap/PathDecoder.sol
  • lib/Bet.sol
  • lib/uniswap/Oracle.sol
  • Affiliate.sol
  • lib/Referral.sol
  • lib/InputTokens.sol
  • Crash.sol
  • lib/uniswap/PoolAddress.sol
  • lib/Swap.sol
  • UniversalBuyAndBurn.sol
  • staking.sol
  • BalanceManager.sol
  • lib/uniswap/TickMath.sol

Part of XGame’s security record

XGame
Audits1 audit by 1 firmLast audit Aug 2025, by Hacken.
Critical findingsNo open critical findingsIn 1 report.
Open XGame’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us