Knoxnet / Token
Hacken reviewed Knoxnet (Knoxnet / Token) on 27 Apr 2026: 42 findings, 0 critical; 32 marked fixed, 6 acknowledged, 4 open.
Report hosted on hacken.io.
Trustblock does not review code.
Findings42
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 3 |
| Medium | 1 | 0 | 5 |
| Low | 3 | 6 | 24 |
HighExcessive Initial Sell Tax Can Severely Restrict Exits and Is Inconsistent With the Contract's Tax Limit InvariantsFixed
The report gives no description here.
HighIncomplete Blacklist Enforcement in transferFrom Allows Blacklisted Callers to Bypass Transfer RestrictionsFixed
The report gives no description here.
HighUnvalidated taxDenominator Breaks Tax Cap Invariants and Causes Hardcoded Limits to Misapply in Both DirectionsFixed
The report gives no description here.
MediumAuto-Swap Reverts During Sell Execution Can Deny User ExitsFixed
The report gives no description here.
MediumBlacklist Enforcement Bypassed When Recipient Is Transaction-Limit ExemptFixed
The report gives no description here.
MediumFee Distribution in _autoSwapBack Uses Configured Tax Rates as Proxy for Actual Fee Composition, Causing Systematic Misallocation Between Marketing and LiquidityFixed
The report gives no description here.
MediumMissing Transfer Event for Taxed Amount Breaks ERC20 Compliance and Causes Balance Tracking MismatchesFixed
The report gives no description here.
MediumtransferOwnership Does Not Update Privileged Exemptions and Router Allowances After Ownership TransferFixed
The report gives no description here.
LowAbbreviated Parameter Names Reduce Interface Clarity and Code ReadabilityFixed
The report gives no description here.
LowInconsistent Use of _msgSender() and msg.sender Reduces Call-Context ConsistencyFixed
The report gives no description here.
Show 10 more
LowIncorrect blacklistCount Accounting on Duplicate Entries Causes Persistent State InconsistencyFixed
The report gives no description here.
LowisTxLimitExempt Simultaneously Disables Both Transaction and Wallet LimitsFixed
The report gives no description here.
LowLimited On-Chain Visibility of Tax Configuration Obscures Effective Tax StateFixed
The report gives no description here.
LowmanualClogClearPercent Ignores the Configured Liquidity Split and Routes All Swap Proceeds to the Marketing ReceiverFixed
The report gives no description here.
LowMid-Section State Variable Declaration Reduces Structural ConsistencyFixed
The report gives no description here.
LowMissing Cross-Parameter Validation in configureAutoSwap Allows Inefficient Auto-Swap ConfigurationsFixed
The report gives no description here.
LowMissing Events for Administrative Configuration Changes Reduces On-Chain ObservabilityFixed
The report gives no description here.
LowMissing Input Validation in recoverStuckETH Can Cause Misconfiguration Reverts or Irrecoverable ETH TransfersFixed
The report gives no description here.
LowMissing Lower Bounds on Transaction and Wallet Limits Allow Transfers to Be Effectively FrozenFixed
The report gives no description here.
LowMissing Zero-Address Validation in airdrop Allows Silent Token Burning and Distorts Circulating Supply ReportingFixed
The report gives no description here.
Show 10 more
LowMissing Zero-Address Validation in setTaxReceivers Can Permanently Misroute Tax Proceeds and Liquidity AssetsFixed
The report gives no description here.
LowNon-Mutable Configuration Values Are Stored in Regular Storage Instead of constant or immutableFixed
The report gives no description here.
LowNon-Reentrant-Safe swapping Modifier Can Be Corrupted Through Nested Execution via Marketing Receiver CallbackFixed
The report gives no description here.
LowPublic Visibility of _shouldApplyTax Conflicts With Internal Naming Convention and Reduces Interface ClarityFixed
The report gives no description here.
LowRedundant amount > 0 Condition in Auto-Swap Trigger Adds Unnecessary LogicFixed
The report gives no description here.
LowSingle-Step Ownership Transfer Increases the Risk of Irrecoverable Administrative MisassignmentFixed
The report gives no description here.
LowUnnamed WalletRestricted Event Parameters Reduce Log Readability and Off-Chain Decoding ClarityFixed
The report gives no description here.
LowUnused using Address for address Declaration Introduces Dead Code and Reduces Code ClarityFixed
The report gives no description here.
LowUse of tx.origin in Blacklist Event Produces Unreliable Caller AttributionFixed
The report gives no description here.
LowUsing block.timestamp as the Router Deadline Removes Effective Expiry ProtectionFixed
The report gives no description here.
Show 2 more
LowWallet Limit Validation Uses Gross Transfer Amount and Can Reject Transfers That Would Satisfy the Post-Tax LimitFixed
The report gives no description here.
LowZero Slippage Protection in addLiquidityETH Allows Liquidity to Be Added at Adversarially Shifted Pool RatiosFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
- contracts/KnoxNet.sol
Part of Knoxnet’s security record
KnoxnetSecurity firm
Hacken343 projects reviewed · 476 reports · latest Sep 2026
See Hacken’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us