The Moonpot / The Moonpot Contracts
Hacken reviewed The Moonpot (The Moonpot Contracts) on 4 Jun 2026: 37 findings, 0 critical; 26 marked fixed, 7 acknowledged, 4 open.
No open critical findings
Open the reportOpen The Moonpot’s security record
Report hosted on hacken.io.
Trustblock does not review code.
Findings37
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 2 |
| Medium | 1 | 1 | 3 |
| Low | 2 | 6 | 21 |
HighStale Snapshot in processBuy Enables NFT Overminting Beyond Round LimitOpen
The report gives no description here.
MediumLiquidity Injection Vulnerable to Sandwich Attacks Due to Missing Slippage ProtectionOpen
The report gives no description here.
LowAsymmetric Left/Right Bit Split in Feistel Network May Introduce Permutation BiasOpen
The report gives no description here.
LowStale VRF Request Mappings Are Not Cleared On RetryOpen
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (13)
- contracts/AbstractMoonpotRound.sol
- contracts/MoonpotRound1.sol
- contracts/IMoonpotHook.sol
- contracts/lib/TEAPermuter.sol
- contracts/MoonpotToken.sol
- contracts/MoonpotManager.sol
- contracts/MoonpotHook.sol
- contracts/MoonpotRound5.sol
- contracts/MoonpotNFT.sol
- contracts/MoonpotRound4.sol
- contracts/MoonpotRound3.sol
- contracts/IMoonpotManager.sol
- contracts/MoonpotRound2.sol
Part of The Moonpot’s security record
The MoonpotAudits1 audit by 1 firmLast audit Jun 2026, by Hacken.
Critical findingsNo open critical findingsIn 1 report.
Open The Moonpot’s security recordSecurity firm
Hacken343 projects reviewed · 476 reports · latest Sep 2026
See Hacken’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us