Tokemak

QuantstampFiles named in the report

Audit

Quantstamp reviewed Tokemak on 29 Jul 2021: 10 findings, 0 critical; 4 marked fixed, 6 acknowledged; 1 more marked mitigated.

No open critical findings
Open the reportOpen Tokemak’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings20

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixedMitigated
Critical0000
High0110
Medium0100
Low0431

The firm marks these findings Mitigated. They are not counted as open, acknowledged or fixed.

Low`initialize` Functions Can be FrontrunMitigated

The `initialize` function that initializes an important contract state can be called by anyone. The attacker can initialize the contract before the legitimate deployer, hoping that the victim continues to use the same contract. In the best case for the victim, they notice it and have to redeploy their contract costing them gas.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (18)

  • contracts/interfaces/ILiquidityPool.sol
  • contracts/controllers/BalancerController.sol
  • contracts/interfaces/IWallet.sol
  • contracts/wallet/ZeroExTradeWallet.sol
  • contracts/manager/Manager.sol
  • contracts/pools/EthPool.sol
  • contracts/interfaces/IWETH.sol
  • contracts/pools/Pool.sol
  • contracts/rewards/Rewards.sol
  • contracts/controllers/SushiswapController.sol
  • contracts/interfaces/IStaking.sol
  • contracts/controllers/ZeroExController.sol
  • contracts/interfaces/ILiquidityEthPool.sol
  • contracts/interfaces/balancer/IBalancerRegistry.sol
  • contracts/token/Toke.sol
  • contracts/staking/Staking.sol
  • contracts/interfaces/IManager.sol
  • contracts/controllers/UniswapController.sol

Part of Tokemak’s security record

Tokemak
Audits6 audits by 2 firmsLast audit Mar 2025, by Hexens.
Critical findingsNo open critical findingsAcross the 6 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Tokemak’s security record

Security firm

Quantstamp

240 projects reviewed · 338 reports · latest Nov 2026

See Quantstamp’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us