Acecoin / AMG AceToken
Hacken reviewed Acecoin (Acecoin / AMG AceToken) on 27 Jan 2026: 36 findings, 0 critical; 30 marked fixed, 6 acknowledged.
Report hosted on hacken.io.
Trustblock does not review code.
Findings36
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 2 |
| Medium | 0 | 5 | 8 |
| Low | 0 | 1 | 20 |
HighStaking Capacity Permanently Lost as Stakes CompleteFixed
The report gives no description here.
HighTeam Rewards Accumulate Without Required Active StakeFixed
The report gives no description here.
MediumIncorrect Assumption of USDT Decimals Leads to Fee MiscalculationsFixed
The report gives no description here.
MediumIncorrect Referral Traversal in _addDownlines() Skips Intermediate UplinesFixed
The report gives no description here.
MediumMismatch Between Tier Assignment and Enumeration Breaks Tier DeterminismFixed
The report gives no description here.
MediumMissing State Validation Enables Re-Subscription to An Active LevelFixed
The report gives no description here.
MediumSubscription Renewal Resets Timer Instead of Extending Causing User Fund LossFixed
The report gives no description here.
MediumTestnet Time Constants Used in Production CodeFixed
The report gives no description here.
MediumUnimplemented pendingReward State Variable Results in Dead Code and Potential Reward Accounting IssuesFixed
The report gives no description here.
MediumUnstake() Function Behaves Differently Than Documented System RequirementFixed
The report gives no description here.
Show 10 more
Low`getSubscribedLevels()` Returns Expired Levels as ActiveFixed
The report gives no description here.
Low`getUserCount()` Returns Misleading ValueFixed
The report gives no description here.
LowConfusing Error Handling When User Has No Active StakesFixed
The report gives no description here.
LowCustom Ownership Implementation Causes Weaker Access Control GuaranteesFixed
The report gives no description here.
LowDuplicate lastStakeAmount Assignment in stake()Fixed
The report gives no description here.
LowFloating PragmaFixed
The report gives no description here.
LowIncorrect Boundary Condition Activates Protection System Despite Sufficient Contract BalanceFixed
The report gives no description here.
LowLack of Public Access to Critical Protocol DataFixed
The report gives no description here.
LowMissing Maximum Fee Cap in setCustomFee() Allows Arbitrary Fee AssignmentFixed
The report gives no description here.
LowMissing Minimum Fee Validation in `setDefaultFee()`Fixed
The report gives no description here.
Show 10 more
LowMissing SafeERC20 For Not ERC20 Compliant USDTFixed
The report gives no description here.
LowMissing Zero-Value Validation for directReward Can Trigger Redundant TransfersFixed
The report gives no description here.
LowPotential Loss of Ownership Control in Contract Using OwnableFixed
The report gives no description here.
LowPrecision Loss in Penalty Calculation Allows Penalty-Free Stake And Unstake for Small AmountsFixed
The report gives no description here.
LowPublic Functions Not Used Internally Can Lead To Additional Gas CostsFixed
The report gives no description here.
LowRedundant Utility Functions Introduce Dead CodeFixed
The report gives no description here.
LowRedundant Zero-Validation of Pre-Initialized lastClaimTime Wastes Gas Across Reward FunctionsFixed
The report gives no description here.
LowStale userStakeTierCount After Unstake Breaks Tier Accounting InvariantsFixed
The report gives no description here.
LowUnused State Variables Introduce Security RisksFixed
The report gives no description here.
LowUse Of Custom Errors Instead Of Revert StringsFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (4)
- MemoryManager.sol
- AceCoin.sol
- StakingAndRewards.sol
- Subscription.sol
Part of Acecoin’s security record
Security firm
Hacken343 projects reviewed · 476 reports · latest Sep 2026
See Hacken’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us