Fungify security review
Hexens reviewed Fungify (Fungify security review) on 25 Jun 2024: 18 findings, 0 critical; 14 marked fixed, 4 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings18
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 3 |
| Medium | 0 | 1 | 4 |
| Low | 0 | 2 | 7 |
HighThe incentive should not be applied to UNINCENTIVIZED tokensFixed
The report gives no description here.
HighVRF random NFT redemption can be manipulatedFixed
The report gives no description here.
HighWPUNKS have dynamic totalSupplyFixed
The report gives no description here.
MediumAttacker can drain contract's vrf balance using ERC721 callbackFixed
The report gives no description here.
MediumIncorrect comparison between callBalance and stickerPrice can prevent the fulfillment of the redeem requestFixed
The report gives no description here.
MediumMissing slippage parameter in the deposit() functionFixed
The report gives no description here.
MediumSignature reuse across forksFixed
The report gives no description here.
LowAn incorrect assertion about totalVaultLiq in the function removeAsset()Fixed
The report gives no description here.
LowMissing limit checks in fee and buffer setting functionsFixed
The report gives no description here.
LowNo event is emmitted on Upgradeable.replaceImplementa tion()Fixed
The report gives no description here.
Show 4 more
LowNo storage gaps in the inherited contractsFixed
The report gives no description here.
LowStandard versions of libraries are used in the upgradeable contractsFixed
The report gives no description here.
LowThe fee calculation in NftIndex.redeem() is not accurateFixed
The report gives no description here.
LowUnnecessary receive function in NftIndexFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Fungify’s security record
FungifySecurity firm
Hexens32 projects reviewed · 75 reports · latest Jul 2026
See Hexens’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us