DART's / RWA Investment
Hacken reviewed DART's (DART's / RWA Investment) on 2 Jun 2026: 24 findings, 0 critical; 20 marked fixed, 2 acknowledged, 2 open.
Report hosted on hacken.io.
Trustblock does not review code.
Findings24
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 1 | 0 | 4 |
| Low | 1 | 2 | 16 |
MediumAppend-Only Product Registry Causes Permanent Denial of Service on Chainlink Automation checkUpkeepFixed
The report gives no description here.
MediumEmpty NFT Batch in distributeYield Causes Permanent Automation Denial-of-Service and Product Lifecycle DeadlockFixed
The report gives no description here.
MediumReverting USDT Transfer in Push-Payment Loop Permanently Blocks Product Distribution and MaturityFixed
The report gives no description here.
MediumYield Escrow Permanently Locked After NFT Burn on MaturityFixed
The report gives no description here.
Low[DualDefense] Overestimated Tolerance Remainder in calculatePeriodToleranceRemainder Stalls DistributionFixed
The report gives no description here.
LowDead owner != address(0) Check in distributeYield and maturityFixed
The report gives no description here.
LowDuplicate Implementation Deployment for SetTier ContractFixed
The report gives no description here.
LowFloating Pragma, Unpinned and Deprecated DependenciesFixed
The report gives no description here.
LowgetClaimableYieldSlots Hides Mid-Round Escrow Entries From IndexersFixed
The report gives no description here.
LowInconsistent Integer Size in Admin Array Iteration Leads to Denial of ServiceFixed
The report gives no description here.
Show 10 more
LowInitialize Implementation Contract Not Locked with _disableInitializers Allows Direct InitializationFixed
The report gives no description here.
LowMissing Chain-Specific Scoping for Forwarder Address Environment Variable Risks Cross-Chain MisconfigurationFixed
The report gives no description here.
LowMissing Constraint Between Distribution Schedule End and Maturity Date Leads to Unexpected Locking ScheduleFixed
The report gives no description here.
LowMissing Duplicate Check in initialize Allows Redundant Admin EntriesFixed
The report gives no description here.
LowMissing Event Emissions On State-Changing Functions Reduce Off-Chain ObservabilityFixed
The report gives no description here.
LowMissing Tier Registry Validation In Product Registration Can Temporarily Block InvestmentFixed
The report gives no description here.
LowMissing Zero-Address Validation in Initialization and Admin Management Leads to Permanent MisconfigurationFixed
The report gives no description here.
LowRestored Product Funding Does Not Clear isInsufficientBalance Flag, Causing Automation to Remain StalledFixed
The report gives no description here.
LowsetAllowedByTierAddress Does Not Filter Zero-Address or Duplicate EntriesFixed
The report gives no description here.
LowUnnecessary Custom String Parser for Admin Addresses Can Be Replaced With Native Foundry CheatcodeFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (30)
- DeployInvestment.s.sol
- DistributionDateLib.sol
- InvestmentFacade.sol
- Automation.sol
- Getter.sol
- DistributeYield.sol
- Schema.sol
- Deposit.sol
- InvestmentNFT.sol
- Maturity.sol
- IAutomation.sol
- IInvestmentErrors.sol
- IInvestmentEvents.sol
- IInvestmentFunctions.sol
- IInvestment.sol
- OnlyOwnerBase.sol
- Storage.sol
- ControlAdmin.sol
- Invest.sol
- IInvestmentNFT.sol
- Withdraw.sol
- SetTier.sol
- MintNFT.sol
- PurchasePermissionLib.sol
- OnlyWhiteListsBase.sol
- InvestmentDeployer.sol
- RegisterProduct.sol
- Initialize.sol
- DeployAutomation.s.sol
- CalculateYieldLib.sol
Part of DART's’s security record
DART'sSecurity firm
Hacken343 projects reviewed · 476 reports · latest Sep 2026
See Hacken’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us