HyperCycle ShareManager V2

Paladin9 Sep 20241 address on Ethereum

Paladin reviewed HyperCycle (HyperCycle ShareManager V2) on 9 Sep 2024: 26 findings, 0 critical; 21 marked fixed, 2 acknowledged, 3 open.

No open critical findings

Open the report Open HyperCycle’s security record

Report stored on IPFS. Content hash QmTJsofSg2uMzB6QjqRooB1SGJGcZaGdTNoCxvmTVdJ1Yq

Trustblock does not review code.

Findings26

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	5
Medium	2	1	6
Low	1	1	10

HighChanging the share manager contract leads to stuck surplus that cannot be withdrawnFixed

The report gives no description here.

HighcHyPC owner can steal license token and most of the HyPC tokens that were meant for distribution after proposal endsFixed

The report gives no description here.

HighMissing approvals when sending tokens leads to DOSFixed

The report gives no description here.

HighshareToken owner can game the migration flowFixed

The report gives no description here.

HighUsers can claim more tokens from hypcSurplus than they shouldFixed

The report gives no description here.

MediumAmbiguous ownership requirement when completing shareProposal creationFixed

The report gives no description here.

MediumCancellation of share migration can be frontrunFixed

The report gives no description here.

MediumIf operatorRevenue is changed, the amount that can be claimed by the previous rules changes as wellFixed

The report gives no description here.

MediumImprecise formula for computing revenue for the hardware operator results in less rewardsFixed

The report gives no description here.

MediumMigrated proposals can be completed individually, resulting in loss of share tokens and revenueFixed

The report gives no description here.

Show 10 more

MediumThe incorrect revenueDepositDelay can be set for a shareProposal during migrationFixed

The report gives no description here.

LowImproper check inside claimHypcPortionAndSurplus()Fixed

The report gives no description here.

LowLack of minimum/maximum thresholds allows the creation of proposals with unsafe revenue delaysFixed

The report gives no description here.

LowMigration allows the creation of shareProposals that could be canceled immediatelyFixed

The report gives no description here.

LowNo minimum duration for proposal deadlinesFixed

The report gives no description here.

LowPotential re-entrancy inside _completeProposal()Fixed

The report gives no description here.

LowThe Events.HypcClaimed event is incorrectly emittedFixed

The report gives no description here.

LowThe system can be spammed with proposalsFixed

The report gives no description here.

LowTypographical issuesFixed

The report gives no description here.

LowVoting in certain cases does not close the voting and can alter the end resultFixed

The report gives no description here.

Show 1 more

LowwToken holders cannot control how many tokens to deposit as their voting powerFixed

The report gives no description here.

Contracts in scope1

Address	Chain	Source code
0xc5d5b9f30aa674aa210a0ec24941bad7d8b42069	Chain: Ethereum	Source code: Verified source

Part of HyperCycle’s security record

HyperCycle

Audits5 audits by 2 firmsLast audit Sep 2024, by Paladin.

Critical findingsNo open critical findingsAcross the 5 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.

Open HyperCycle’s security record

Security firm

Paladin

176 projects reviewed · 241 reports · latest Apr 2025

See Paladin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.