Doefin / Doefin-Contracts

HackenRepository at commit 862d43e

Audit

Hacken reviewed Doefin (Doefin-Contracts) on 3 Feb 2025: 17 findings, 1 critical; 15 marked fixed, 2 open.

1 critical finding, fixed
Open the reportOpen Doefin’s security record

Report hosted on audits.hacken.io.

Trustblock does not review code.

Findings17

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High003
Medium003
Low208
CriticalUnauthorized Users Can Change Crucial RolesFixed

The report gives no description here.

HighFrontrunning Attack Leading to Fund TheftFixed

The report gives no description here.

HighInvalid Block Difficulty Calculation Affects Order LogicFixed

The report gives no description here.

HighValidation Error in updateOrder Allows makerPremium to Exceed notionalFixed

The report gives no description here.

MediumERC1155 Tokens Not Burned in deleteOrders() FunctionFixed

The report gives no description here.

MediumOrder Execution Infeasibility in Edge Case of Identical Strike ValueFixed

The report gives no description here.

MediumRemoval of Approved Tokens May Lead to Business Requirement ViolationsFixed

The report gives no description here.

LowChainlink’s latestRoundData() Function Might Return Incorrect ResultsFixed

The report gives no description here.

LowFloating PragmaFixed

The report gives no description here.

LowIncompatibility With Fee-On-Transfer And Rebasing TokensFixed

The report gives no description here.

Show 5 more
LowMissing Reentrancy ModifierFixed

The report gives no description here.

LowMissing Zero Address ChecksFixed

The report gives no description here.

LowProtocol Users Can Match Their Own OrdersFixed

The report gives no description here.

LowUnnecessary Mapping Update Increases Gas UsageFixed

The report gives no description here.

LowUnused Functions, Modifiers and VariablesFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (9)

  • https://github.com/Doefin/v1-core/src/DoefinV1BlockHeaderOracle.sol at commit 862d43eb006989bfe2ba74ef2923c272c18187b8
  • https://github.com/Doefin/v1-core/src/libraries/BlockHeaderUtils.sol at commit 862d43eb006989bfe2ba74ef2923c272c18187b8
  • https://github.com/Doefin/v1-core/src/interfaces/IDoefinV1OrderBook.sol at commit 862d43eb006989bfe2ba74ef2923c272c18187b8
  • https://github.com/Doefin/v1-core/src/interfaces/IDoefinBlockHeaderOracle.sol at commit 862d43eb006989bfe2ba74ef2923c272c18187b8
  • https://github.com/Doefin/v1-core/src/interfaces/IAdminable.sol at commit 862d43eb006989bfe2ba74ef2923c272c18187b8
  • https://github.com/Doefin/v1-core/src/DoefinV1OrderBook.sol at commit 862d43eb006989bfe2ba74ef2923c272c18187b8
  • https://github.com/Doefin/v1-core/src/DoefinV1Config.sol at commit 862d43eb006989bfe2ba74ef2923c272c18187b8
  • https://github.com/Doefin/v1-core/src/interfaces/IDoefinConfig.sol at commit 862d43eb006989bfe2ba74ef2923c272c18187b8
  • https://github.com/Doefin/v1-core/src/libraries/Errors.sol at commit 862d43eb006989bfe2ba74ef2923c272c18187b8

Part of Doefin’s security record

Doefin
Audits2 audits by 1 firmLast audit Apr 2025, by Hacken.
Critical findingsNo open critical findingsAcross the 2 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Doefin’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us