CertiK reviewed Hooked Protocol (Hooked.io - Eco & Sale) on 27 Apr 2023: 5 findings, 0 critical; all marked fixed.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 0 | 5 |
Performing integer division before multiplication truncates the low bits, losing the precision of calculation. ```solidity=100 return totalAllocation / 10 + (totalAllocation * 9 / 10 * elapsedTime) / _unlockTimestamps.length; ```
The imported `Address` library is never used in `PrivateSale` and `Ecosystem` contracts.
The releasable token addresses in contracts are stored in the immutable variable `_token`, making the parameter `token` in the `releasedAmount()` function redundant.
The contract is serving as the underlying entity to interact with one or more third party protocols. The scope of the audit treats third party entities as black boxes and assume their functional correctness. However, in the real world, third parties can possibly create severe impacts, such as lock tokens, etc. ```solidity=78 function releasedAmount(address token, uint64 timestamp) public view virtual returns (uint256) { ``` - The function `Ecosystem.releasedAmount` interacts with third party contract with `IERC20` interface via `token`. --- ```solidity=76 function releasedAmount(address token, uint64 timestamp) public view virtual returns (uint256) { ``` - The function `PrivateSale.releasedAmount` interacts with third party contract with `IERC20` interface via `token`.
One or more state variables are never used in the codebase. - Variable `_released` in `Ecosystem` is never used in `Ecosystem`. - Variable `_released` in `PrivateSale` is never used in `PrivateSale`.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (2)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us