Vechain Foundation / Marketplace

HackenFiles named in the report

Hacken reviewed VeChain (Vechain Foundation / Marketplace) on 21 Dec 2023: 20 findings, 0 critical; all marked fixed.

No open critical findings
Open the reportOpen VeChain’s security record

Report hosted on audits.hacken.io.

Trustblock does not review code.

Findings20

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High002
Medium001
Low0017
HighDenial of Service - Broken Functionality of the AuctionFixed

The report gives no description here.

HighRequirements Violation, Admin Cannot Cancel Users’ AuctionsFixed

The report gives no description here.

MediumRedundant receive() functionalityFixed

The report gives no description here.

LowCheck-Effect-Interaction Pattern ViolationFixed

The report gives no description here.

LowCode DuplicationFixed

The report gives no description here.

LowDefault State Variable VisibilityFixed

The report gives no description here.

LowFunds Collected By Operators Instead Of By AdminsFixed

The report gives no description here.

LowMissing Event EmittingFixed

The report gives no description here.

LowRedundant _msgSender(), Meta-Transactions Not ImplementedFixed

The report gives no description here.

LowRedundant Conditional StatementFixed

The report gives no description here.

Show 10 more
LowRedundant Mapping KeysFixed

The report gives no description here.

LowRedundant SafeMath LibraryFixed

The report gives no description here.

LowRedundant Structure DeclarationFixed

The report gives no description here.

LowRedundant Structure FieldFixed

The report gives no description here.

LowUnclear Require Statement Error StringsFixed

The report gives no description here.

LowUnfinalized CodeFixed

The report gives no description here.

LowUnindexed offerType Events ParameterFixed

The report gives no description here.

LowUnvalidated ParametersFixed

The report gives no description here.

LowUsage of Magic Numbers Instead Of ConstantsFixed

The report gives no description here.

LowUse of uint256 Instead of EnumsFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (5)

  • BaseMarketplaceContract.sol
  • contracts/Governance/Timelock.sol
  • OfferContractVIP180.sol
  • WorldOfVBidAuction.sol
  • WorldOfVFixedPriceNonCustodial.sol

Part of VeChain’s security record

VeChain
Audits6 audits by 3 firmsLast audit Feb 2026, by Hacken.
Critical findingsNo open critical findingsAcross the 6 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open VeChain’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us