Thena / THENA-V3
Hacken reviewed THENA (THENA-V3) on 25 May 2024: 32 findings, 0 critical; 30 marked fixed, 2 open.
Report hosted on hacken.io.
Trustblock does not review code.
Findings32
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 1 |
| Low | 2 | 0 | 28 |
HighIncorrect indexing in distribute functions leads to DoS and wrong distributionsFixed
The report gives no description here.
MediumUncleared approval in _removeTokenFrom function may lead to unauthorized controlFixed
The report gives no description here.
LowBest practice violation due to usage of assert()Fixed
The report gives no description here.
LowCoarse-grained access controlFixed
The report gives no description here.
LowCommented code partsFixed
The report gives no description here.
LowHardcoded number literals should be defined as constantsFixed
The report gives no description here.
LowIncorrect NatSpec description of the _lock_end parameter in create_lock_for functionFixed
The report gives no description here.
LowLack of feedback in performUpkeep function executionFixed
The report gives no description here.
LowLack of named parameters mappingFixed
The report gives no description here.
LowLack of Pausable feature for user facing system contractsFixed
The report gives no description here.
Show 10 more
LowMisleading comment in _distribute() and distribute()Fixed
The report gives no description here.
LowMissing 0x0 address validationFixed
The report gives no description here.
LowMissing constant modifier for state variablesFixed
The report gives no description here.
LowMissing events emitting for critical functionsFixed
The report gives no description here.
LowMissing immutable keyword for state variablesFixed
The report gives no description here.
LowMissing method for removing elements from the rewardTokens arrayFixed
The report gives no description here.
LowMissing update of eidToChainID mapping in GenericLayerZero contractFixed
The report gives no description here.
LowRedundant assignment of variables increases gas consumptionFixed
The report gives no description here.
LowRedundant check of opBNBUpdateReady in EpochDistributorOpBNBFixed
The report gives no description here.
LowRedundant getters for the public state variablesFixed
The report gives no description here.
Show 10 more
LowRedundant importsFixed
The report gives no description here.
LowRedundant payable keyword in the update functionFixed
The report gives no description here.
LowRedundant variable assignment increases gas cost in Gauge and VotingIncentivesFixed
The report gives no description here.
LowReentrancyGuard custom implementationFixed
The report gives no description here.
LowSome public functions should be declared as externalFixed
The report gives no description here.
LowUnchecked return value of approve functionFixed
The report gives no description here.
LowUnnecessary and potentially dangerous receive() functionFixed
The report gives no description here.
LowUnnecessary constructor parameter _votingIncentivesFactory in VotingIncentives.solFixed
The report gives no description here.
LowUnused variable decimals in the VotingEscrowCrossChainFixed
The report gives no description here.
LowViolation of the Checks-Effects-Interactions (CEI) patternFixed
The report gives no description here.
Contracts in scope1
| Address | Chain | Source code |
|---|---|---|
| 0xf4c8e32eadec4bfe97e0f595add0f4450a863a11 | Chain: BNB Chain | Source code: Verified source |
Part of THENA’s security record
THENASecurity firm
Hacken343 projects reviewed · 476 reports · latest Sep 2026
See Hacken’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us