Union Finance Update 2 audit
Audit competition · firm’s term: public contest
Sherlock reviewed Union (Union Finance Update 2 audit) on 13 Jul 2024: 9 findings, 0 critical; 5 marked fixed, 4 acknowledged.
No open critical findings
Findings9
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 3 |
| Medium | 0 | 3 | 2 |
| Low | 0 | 0 | 0 |
HighVouchFaucet can be immediately drained by anyoneAcknowledged
The report gives no description here.
MediumAny user can claim an unlimited amount of vouch in VouchFaucet.solAcknowledged
The report gives no description here.
MediumERC1155Voucher.onERC1155BatchReceived() does not check the caller is the valid token therefore any unregistered token can invoke onERC1155BatchReceived()Acknowledged
The report gives no description here.
MediumPossible loss of funds, transfer functions can silently failAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Union’s security record
UnionAudits1 audit by 1 firmLast audit Jul 2024, by Sherlock.
Critical findingsNo open critical findingsIn 1 report.
Open Union’s security recordSecurity firm
Sherlock46 projects reviewed · 67 reports · latest Sep 2026
See Sherlock’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us