Lingo / Token + Vesting + Staking

Hacken19 Dec 20241 address on Base

Hacken reviewed Lingo (Lingo / Token + Vesting + Staking) on 19 Dec 2024: 10 findings, 0 critical; all marked fixed.

No open critical findings

Open the report Open Lingo’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings10

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	0
Low	0	0	10

Low[DualDefense] Fee Bypass Through Staking Contract Using Zero Locking DurationFixed

The report gives no description here.

Lowdelete Keyword Usage Leaves Gaps in userPositions Array After UnstakeFixed

The report gives no description here.

LowInconsistencies Between Project Documentation and Contract ImplementationFixed

The report gives no description here.

LowInefficient Gas Usage Due to addInternalAccess() Invocation in ConstructorFixed

The report gives no description here.

LowInefficient Minting Pattern for Vesting TokensFixed

The report gives no description here.

LowLack of Minimum Stake Validation Can Lead to Array OverpopulationFixed

The report gives no description here.

LowMissing Two-step Ownership Transfer ProcessFixed

The report gives no description here.

LowPotential Accounting Inconsistency Due to Fee Deduction in Staking TransactionsFixed

The report gives no description here.

LowPotential Front-Running Risk in Lock Duration UpdatesFixed

The report gives no description here.

LowViolation of the Checks-Effects-Interactions (CEI) patternFixed

The report gives no description here.

Contracts in scope1

Address	Chain	Source code
0xfb42da273158b0f642f59f2ba7cc1d5457481677	Chain: Base	Source code: Verified source

Part of Lingo’s security record

Lingo

Audits2 audits by 2 firmsLast audit Apr 2025, by Cantina.

Critical findingsNo open critical findingsAcross the 2 reports, 3 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Lingo’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.