Heurist
Zokyo reviewed Heurist on 4 Nov 2024: 17 findings, 0 critical; 6 marked fixed, 11 acknowledged.
Statuses are the security firm’s own, from this report. Trustblock does not review code.
Findings17
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 2 |
| Medium | 0 | 4 | 0 |
| Low | 0 | 7 | 4 |
MediumExchange Rate Manipulation via Direct TransfersAcknowledged
The report gives no description here.
MediumMissing Upper Bound on vestPeriodAcknowledged
The report gives no description here.
MediumRisk of CentralisationAcknowledged
The report gives no description here.
MediumZero HEU Payouts Due to Rounding in Exchange Rate CalculationAcknowledged
The report gives no description here.
LowClaim During Migration ModeAcknowledged
The report gives no description here.
LowInsufficient HEU Tokens for ClaimsAcknowledged
The report gives no description here.
LowLack of Two-Step Ownership TransferAcknowledged
The report gives no description here.
LowMissing Invariant for Consistent Token Balances (ChestRewards.addRewards())Acknowledged
The report gives no description here.
LowMissing Validation for Claiming More than Available Balance (ChestRewards.claimRewards())Acknowledged
The report gives no description here.
LowMissing Validation for Empty Address Inputs (ChestRewards.addRewards() and distribute())Acknowledged
The report gives no description here.
Show 1 more
LowUse the proxy pattern at the early stage of the protocolAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Heurist’s security record
HeuristSecurity firm
Zokyo89 projects reviewed · 131 reports · latest Feb 2025
See Zokyo’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us