zkNoid Audit

Extropy1 address on Mina protocol

Audit · firm’s term: security review

Extropy reviewed zkNoid (zkNoid Audit) on 9 Sep 2024: 9 findings, 0 critical; 6 marked fixed, 3 open.

No open critical findings
Open the reportOpen zkNoid’s security record
Report stored on IPFS. Content hash bafybeiejszikgmqd6g6j6fvh63q5ialfaiobwvlx5v3pcopwm4bdkn7uqy

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium103
Low202
HighNo zero check on amounts of tickets boughtFixed

No zero check on amounts of tickets bought

Medium‘seed‘ input lengthFixed

‘generateNumbersSeed()‘ output can be manipulated by ‘seed‘ input length

MediumCompromised ‘treasury‘ addressFixed

Compromised ‘treasury‘ address

Mediumdeprecated computeRootAndKeyFixed

Deprecated ‘computeRootAndKey()‘ is used instead of ‘computeRootAnd- KeyV2()

Low0 ticket number possibleFixed

Having 0 among ticket numbers is possible when using ‘random()‘ function

LowRound Length incorrectly documentedFixed

A round lasts less than documented

Contracts in scope1

Part of zkNoid’s security record

zkNoid
Audits1 audit by 1 firmLast audit Sep 2024, by Extropy.
Critical findingsNo open critical findingsIn 1 report.
Open zkNoid’s security record

Security firm

Extropy

9 projects reviewed · 12 reports · latest Mar 2025

See Extropy’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us