Iztar

HashEx2 addresses on BNB Chain

Audit · firm’s term: audit report

HashEx reviewed Iztar on 6 Jun 2024: 24 findings, 1 critical; 22 marked fixed, 2 open.

1 critical finding, fixed
Open the reportOpen Iztar’s security record

Report hosted on hashex.org.

Trustblock does not review code.

Findings24

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High107
Medium007
Low107
CriticalStaking time incorrectly updatedFixed

The report gives no description here.

HighFees can be set more that 100%Fixed

The report gives no description here.

HighLack of tests and documentationFixed

The report gives no description here.

HighLack of tests and documentationFixed

The report gives no description here.

HighReplay attack on signaturesFixed

The report gives no description here.

HighReplay attack on signaturesFixed

The report gives no description here.

HighThe contract verifies the signature for a different address than the one staking the fundsFixed

The report gives no description here.

HighThe payment token can be updated for the existing salesFixed

The report gives no description here.

MediumAdditional staking can cause the user's staked token address to be replacedFixed

The report gives no description here.

MediumIncorrect APR calculationFixed

The report gives no description here.

Show 10 more
MediumLack of input validationFixed

The report gives no description here.

MediumMinimum and maximum stake are set the same for all tokensFixed

The report gives no description here.

MediumNo constraints on the APR and stake duration variablesFixed

The report gives no description here.

MediumOverlap of different NFT sells with same IDFixed

The report gives no description here.

MediumStaking token address can be changedFixed

The report gives no description here.

LowGas optimizationsFixed

The report gives no description here.

LowInconsistent usage of msg.sender and _msgSender() in the same functionFixed

The report gives no description here.

LowLack of error messagesFixed

The report gives no description here.

LowLack of eventsFixed

The report gives no description here.

LowLack of eventsFixed

The report gives no description here.

Show 2 more
LowLack of reentrancy checksFixed

The report gives no description here.

LowResult of token transfers not checkedFixed

The report gives no description here.

Contracts in scope2

AddressChainSource code
0x0f1b4847c8f658b051651ee4f5cf7bb7b273773bChain: BNB ChainSource code: Verified source
0x5abea62fd897424d48ab7825d79aead1fe1ba0a7Chain: BNB ChainSource code: Verified source

Part of Iztar’s security record

Iztar
Audits1 audit by 1 firmLast audit Jun 2024, by HashEx.
Critical findingsNo open critical findingsIn that report, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open Iztar’s security record

Security firm

HashEx

118 projects reviewed · 159 reports · latest Feb 2025

See HashEx’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us