S3 Markets / S3 EAC Ledger
Hacken reviewed S3 Markets (S3 Markets / S3 EAC Ledger) on 6 Feb 2026: 19 findings, 0 critical; all marked fixed.
Report hosted on hacken.io.
Trustblock does not review code.
Findings19
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 2 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 0 | 16 |
HighExpired Tokens Permanently TrappedFixed
The report gives no description here.
HighFunds Loss via Direct Transfer in CustodyVaultFixed
The report gives no description here.
MediumExpired Tokens Permanently Locked Due to Burn RestrictionFixed
The report gives no description here.
LowFloating PragmaFixed
The report gives no description here.
LowInactive Buyers Remain in _buyers IndefinitelyFixed
The report gives no description here.
LowInsufficient Role Segregation in CustodyVaultFixed
The report gives no description here.
LowLack of Event Emitting in setToken()Fixed
The report gives no description here.
LowMismatch Between NatSpec Documentation and ImplementationFixed
The report gives no description here.
LowMissing Array Length ValidationFixed
The report gives no description here.
LowMissing Storage Gap in Upgradeable ContractFixed
The report gives no description here.
Show 9 more
LowMissing supportsInterface OverrideFixed
The report gives no description here.
LowMissing Validation Between Token Expiry and Market Entry PeriodFixed
The report gives no description here.
LowMissing Zero Address ValidationFixed
The report gives no description here.
LowPresence of Unused CodeFixed
The report gives no description here.
LowPublic Function not Used Internally can be Marked ExternalFixed
The report gives no description here.
LowRedundant Zero-Address Checks in Transfer LogicFixed
The report gives no description here.
LowTransfer Gate Bypassed by Non-Allowlisted OperatorsFixed
The report gives no description here.
LowUnchecked Return Value of _consumeBalancesForRetireFixed
The report gives no description here.
LowUnnecessary Addition to _buyers in retireFromExternalFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (4)
- CustodyVault.sol
- TransferGate.sol
- UUPSProxy.sol
- EAC1155.sol
Part of S3 Markets’s security record
S3 MarketsSecurity firm
Hacken343 projects reviewed · 476 reports · latest Sep 2026
See Hacken’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us