RE.AL / RWA + Real-Ether

HackenCode version: not recorded (see the report)

Hacken reviewed re.al (RE.AL / RWA + Real-Ether) on 24 May 2024: 25 findings, 0 critical; 18 marked fixed, 7 open.

No open critical findings
Open the reportOpen re.al’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings25

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium102
Low6016
MediumIncorrect Fee Assignment in updateDistribution Function of RoyaltyHandler ContractFixed

The report gives no description here.

MediumRealVault setRebaseInterval Logical Error Causes Rejection of Valid IntervalsFixed

The report gives no description here.

LowDenial of Service Risk in DelegateFactory's revokeExpiredDelegators FunctionFixed

The report gives no description here.

LowIncomplete Event Data in RealVault's InstantWithdraw FunctionFixed

The report gives no description here.

LowIncorrect Balance Checks Leading to Risks of Zero Balance Locks in RWAVotingEscrowFixed

The report gives no description here.

LowLack of Configuration EventsFixed

The report gives no description here.

LowRedundant account Parameter in RevenueStreamETH's functionsFixed

The report gives no description here.

LowRedundant Conditions in RealVault Contract's currentSharePrice FunctionFixed

The report gives no description here.

LowRedundant Declarations in RealEth Project ContractsFixed

The report gives no description here.

LowRedundant Validation in _checkForExpiredRevenue Function of RevenueStreamETH ContractFixed

The report gives no description here.

Show 8 more
LowRisk of Asset Yield Reduction Due to Unrestricted Rebase in StrategyManager ContractFixed

The report gives no description here.

LowRisk of ETH Lock in RevenueStreamETH Due to Unbounded Array SizesFixed

The report gives no description here.

LowRisk of Fees on Minting and Burning Due to Configuration Changes in RWATokenFixed

The report gives no description here.

LowRisk of Griefing Attacks in RealVault Contract DepositsFixed

The report gives no description here.

LowRisk of Price Manipulation in Direct SwapManager CallsFixed

The report gives no description here.

LowTheoretical Risk of State Inconsistency in RWAVotingEscrow contractFixed

The report gives no description here.

LowUnhandled Insufficient Invested Amount in StrategyManager's ForceWithdrawFixed

The report gives no description here.

LowViolation of Checks-Effects-Interactions Pattern in RWA Project ContractsFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of re.al’s security record

re.al
Audits4 audits by 1 firmLast audit Sep 2024, by Hacken.
Critical findingsNo open critical findingsAcross 4 reports.
Open re.al’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us