Hesty / Hesty-Contract

Hacken28 Nov 2024Files named in the report

Hacken reviewed Hesty (Hesty-Contract) on 28 Nov 2024: 26 findings, 4 critical; 22 marked fixed, 4 open.

4 critical findings, fixed

Open the report Open Hesty’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings26

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	4
High	0	0	3
Medium	2	0	5
Low	2	0	10

CriticalAll Fees Are Locked Within The ProtocolFixed

The report gives no description here.

CriticalClaiming More Tokens Than Purchased Due to Missing Reset on Token BalanceFixed

The report gives no description here.

CriticalDouble Counting of Referral Fees Leading to Fund Shortages on Raise CompletionFixed

The report gives no description here.

CriticalUnintended Increase of maxAmountOfRefRev on Each Referral Reward CalculationFixed

The report gives no description here.

HighInconsistent Fund Recovery Validation Leading to Fund Theft and Double ClaimsFixed

The report gives no description here.

HighOver-Selling of Property Tokens Leading to Unclaimable TokensFixed

The report gives no description here.

HighThe recoverFundsInvested Function Does Not Reset rightForTokens CollectionFixed

The report gives no description here.

MediumDirect Token Transfer in adminBuyTokens Prevents Refunds and Allows Premature TradingFixed

The report gives no description here.

MediumProtocol Does Not Support Non-Standard ERC20 TokensFixed

The report gives no description here.

MediumProtocol's Owner Can Forever Extend Raise DeadlineFixed

The report gives no description here.

Show 10 more

MediumPurchase of Tokens by Blacklisted or Non-KYC EntitiesFixed

The report gives no description here.

MediumReference Fee Limit Invariant Can Be BrokenFixed

The report gives no description here.

LowEvent Emitted Even When No Rewards Are Added, Causing Off-Chain Indexing ErrorsFixed

The report gives no description here.

LowExcessive Fees Allowable Up to 100%Fixed

The report gives no description here.

LowFloating PragmaFixed

The report gives no description here.

LowFunds Lock on Fee on Transfer TokensFixed

The report gives no description here.

LowInconsistent Application of Input Validation and Events EmissionFixed

The report gives no description here.

LowMisleading Naming Schema for Variables Suggesting ConstantsFixed

The report gives no description here.

LowMultiple Calls to approveProperty Allowing Deadline Modification with Incorrect Event EmissionFixed

The report gives no description here.

LowRaise Completion Without Meeting Fundraising ThresholdFixed

The report gives no description here.

Show 2 more

LowRedundant Inheritance of AccessControlDefaultAdminRules in PropertyTokenFixed

The report gives no description here.

LowRisk of HestyRouter Locking Due to Modifiable Access Control ContractFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (27)

data/abi/contracts/interfaces/ITokenFactory.sol
contracts/interfaces/ITokenFactory.sol
data/abi/contracts/interfaces/ITokenFactory.sol/ITokenFactory.json
data/abi/contracts/interfaces/IHestyAccessControl.sol
data/abi/contracts/TokenFactory.sol
data/abi/contracts/interfaces/IHestyAccessControl.sol/IHestyAccessControl.json
data/abi/contracts/Constants.sol/Constants.json
data/abi/contracts/HestyAccessControl.sol
data/abi/contracts/HestyRouter.sol
data/abi/contracts/Constants.sol
data/abi/contracts/Referral/ReferralSystem.sol
data/abi/contracts/interfaces/IReferral.sol
data/abi/contracts/HestyRouter.sol/HestyRouter.json
data/abi/contracts/PropertyToken.sol/PropertyToken.json
contracts/interfaces/IReferral.sol
data/abi/contracts/interfaces/IReferral.sol/IReferral.json
data/abi/contracts/HestyAccessControl.sol/HestyAccessControl.json
contracts/HestyRouter.sol
data/abi/contracts/Referral/ReferralSystem.sol/ReferralSystem.json
contracts/TokenFactory.sol
contracts/Referral/ReferralSystem.sol
contracts/HestyAccessControl.sol
data/abi/contracts/PropertyToken.sol
contracts/PropertyToken.sol
contracts/interfaces/IHestyAccessControl.sol
contracts/Constants.sol
data/abi/contracts/TokenFactory.sol/TokenFactory.json

Part of Hesty’s security record

Hesty

Audits1 audit by 1 firmLast audit Nov 2024, by Hacken.

Critical findingsNo open critical findingsIn that report, 4 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Hesty’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.