The Graph
OpenZeppelin reviewed The Graph on 27 Apr 2021: 4 findings, 0 critical; all marked fixed.
No open critical findings
Open the reportOpen The Graph’s security record
Report hosted on blog.openzeppelin.com.
Trustblock does not review code.
Findings4
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 0 | 4 |
Low[L01] Duplicated codeFixed
The report gives no description here.
Low[L02] Constant is not declared explicitlyFixed
The report gives no description here.
Low[L03] Same event used for multiple variablesFixed
The report gives no description here.
Low[L04] Unclear lack of input validationFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (3)
- contracts/disputes/DisputeManager.sol
- contracts/disputes/DisputeManagerStorage.sol
- contracts/disputes/IDisputeManager.sol
Part of The Graph’s security record
The GraphAudits7 audits by 1 firmLast audit Sep 2023, by OpenZeppelin.
Critical findingsNo open critical findingsAcross the 7 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open The Graph’s security recordSecurity firm
OpenZeppelin67 projects reviewed · 184 reports · latest Aug 2026
See OpenZeppelin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us