Yelay security review
Hexens reviewed YELAY (Yelay security review) on 4 Oct 2024: 7 findings, 0 critical; 6 marked fixed, 1 acknowledged.
No open critical findings
Findings7
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 2 |
| Medium | 0 | 0 | 4 |
| Low | 0 | 0 | 0 |
Marked Informational by the firm. Not counted as findings.
InformationalMerging the YelayOwnable and YelayOwner contracts for gas optimizationAcknowledged
The report gives no description here.
InformationalMissing disableinitializers() in constructor to prevent uninitialized contractsAcknowledged
The report gives no description here.
InformationalUse custom errorsAcknowledged
The report gives no description here.
InformationalConvertLib in-line calculations with literals should be replaced by constantsFixed
The report gives no description here.
InformationalDiscrepancies in sYLAYBase docsFixed
The report gives no description here.
InformationalPush-based user migration is vulnerable to sybil attackFixed
The report gives no description here.
InformationalUsing console in the production codeFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of YELAY’s security record
YELAYAudits3 audits by 1 firmLast audit Nov 2025, by Hexens.
Critical findingsNo open critical findingsAcross 3 reports.
Open YELAY’s security recordSecurity firm
Hexens32 projects reviewed · 75 reports · latest Jul 2026
See Hexens’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us