Hedgehog
Quantstamp reviewed Liqui (Hedgehog) on 26 Oct 2021: 13 findings, 0 critical; 11 marked fixed, 1 acknowledged, 1 open.
Report hosted on certificate.quantstamp.com.
Trustblock does not review code.
Findings13
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 1 | 0 | 4 |
| Low | 0 | 1 | 6 |
MediumOverflow in the Output MsgOpen
In the `lib.rs` file (L465), located in `hh-paramitiuel` module, there is a an output print of the sum of `collection_amount_pool_a` and `collection_amount_pool_b` . The problem here is that the addition is done using the `+` operator, which can cause an overflow. If one uses debug build, it can cause a panic; however, in release build it will overflow silently.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (4)
- programs/hh-vault/src/lib.rs
- programs/hh-parimutuel/src/lib.rs
- programs/hh-vault/src/apricot.rs
- programs/hh-vault/src/port_finance.rs
Part of Liqui’s security record
LiquiSecurity firm
Quantstamp236 projects reviewed · 332 reports · latest Oct 2026
See Quantstamp’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us