InstaDApp Audit

OpenZeppelinFiles named in the report

Audit · firm’s term: audit

OpenZeppelin reviewed Instadapp (InstaDApp Audit) on 17 Sep 2019: 15 findings, 0 critical; none marked fixed.

No open critical findings
Open the reportOpen Instadapp’s security record

Report hosted on blog.openzeppelin.com.

Trustblock does not review code.

Findings15

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium600
Low900
MediumAdmin/Owner roles may be burned by mistakeOpen

The report gives no description here.

MediumLogging a memory pointer instead of the actual dataOpen

The report gives no description here.

MediumTransfer of wallet ownership can be DoSed — Method 1Open

The report gives no description here.

MediumTransfer of wallet ownership can be DoSed — Method 2Open

The report gives no description here.

MediumUndocumented assembly blocksOpen

The report gives no description here.

MediumVarious NatSpec issuesOpen

The report gives no description here.

LowFunction visibilities could be more restrictiveOpen

The report gives no description here.

LowFunction/Modifier/Variable naming could be improved for readabilityOpen

The report gives no description here.

LowHardcoded gas remainderOpen

The report gives no description here.

LowImplicit ReturnsOpen

The report gives no description here.

Show 5 more
LowPrivileged roles can have only one memberOpen

The report gives no description here.

LowThe proxies map can lose track of walletsOpen

The report gives no description here.

LowUserWallet owners may mistakenly burn ownershipOpen

The report gives no description here.

LowWallet creation transactions can be made to fail — Method 1Open

The report gives no description here.

LowWallet creation transactions can be made to fail — Method 2Open

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (3)

  • flats/InstaRegistry.sol
  • contracts/UserWallet.sol
  • contracts/InstaRegistry.sol

Part of Instadapp’s security record

Instadapp
Audits1 audit by 1 firmLast audit Sep 2019, by OpenZeppelin.
Critical findingsNo open critical findingsIn 1 report.
Open Instadapp’s security record

Security firm

OpenZeppelin

67 projects reviewed · 184 reports · latest Aug 2026

See OpenZeppelin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us