The Moonpot / The Moonpot Contracts

HackenFiles named in the report

Audit

Hacken reviewed The Moonpot (The Moonpot Contracts) on 4 Jun 2026: 37 findings, 0 critical; 26 marked fixed, 7 acknowledged, 4 open.

No open critical findings
Open the reportOpen The Moonpot’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings37

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High102
Medium113
Low2621
MediumUsers May Become Unable to Claim NFT Rewards If a Round Never Sells OutAcknowledged

The report gives no description here.

LowMissing Minimum Purchase Validation Enables VRF Subscription DrainageAcknowledged

The report gives no description here.

LowNo Emergency Pause Mechanism in MoonpotManagerAcknowledged

The report gives no description here.

LowQuote Function Assumes Constant Liquidity Across TicksAcknowledged

The report gives no description here.

LowUnlimited Token Approvals to Permit2Acknowledged

The report gives no description here.

LowUsers May Unintentionally Purchase in a Different Round Due to Race ConditionAcknowledged

The report gives no description here.

LowZero maxTmpSell Results in Full TMP BurnAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (13)

  • contracts/AbstractMoonpotRound.sol
  • contracts/MoonpotRound1.sol
  • contracts/IMoonpotHook.sol
  • contracts/lib/TEAPermuter.sol
  • contracts/MoonpotToken.sol
  • contracts/MoonpotManager.sol
  • contracts/MoonpotHook.sol
  • contracts/MoonpotRound5.sol
  • contracts/MoonpotNFT.sol
  • contracts/MoonpotRound4.sol
  • contracts/MoonpotRound3.sol
  • contracts/IMoonpotManager.sol
  • contracts/MoonpotRound2.sol

Part of The Moonpot’s security record

The Moonpot
Audits1 audit by 1 firmLast audit Jun 2026, by Hacken.
Critical findingsNo open critical findingsIn 1 report.
Open The Moonpot’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us