QuickSwap security review
Hexens reviewed Quickswap (QuickSwap security review) on 4 Apr 2023: 18 findings, 1 critical; 16 marked fixed, 2 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings18
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 1 | 2 |
| Medium | 0 | 1 | 1 |
| Low | 0 | 0 | 12 |
CriticalORDERBOOK'S WETH CAN BE DRAINEDFixed
The report gives no description here.
HighEXECUTOR CAN BE GAS GRIEVEDFixed
The report gives no description here.
HighORDER LIST ITERATION WILL QUICKLY BECOME IMPOSSIBLE DUE TO GAS USAGEFixed
The report gives no description here.
MediumUSERS’ ETH COULD GET LOSTFixed
The report gives no description here.
LowCENTRALISATION RISKFixed
The report gives no description here.
LowCONTRACT CAN BE ACCIDENTALLY OSSIFIEDFixed
The report gives no description here.
LowEARLY EXIT OPTIMISATION FOR CONDITIONALSFixed
The report gives no description here.
LowFAVOUR FAST PRICE CHECK CAN BE OPTIMISEDFixed
The report gives no description here.
LowFUNCTION PARAMETERS CAN BE MARKED AS CALLDATAFixed
The report gives no description here.
LowFUNCTIONS CAN BE MARKED AS EXTERNALFixed
The report gives no description here.
Show 6 more
LowORDERBOOK AND POSITIONROUTER STRUCTS CAN BE PACKEDFixed
The report gives no description here.
LowPRICE ORACLE RISKFixed
The report gives no description here.
LowREDUNDANT USAGE OF SAFEMATHFixed
The report gives no description here.
LowTIMELOCK LEVERAGE ENABLE/DISABLE GAS OPTIMISATIONFixed
The report gives no description here.
LowVARIABLES ARE INITIALISED TO DEFAULT VALUESFixed
The report gives no description here.
LowVARIABLES CAN BE MARKED AS IMMUTABLEFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Quickswap’s security record
QuickswapSecurity firm
Hexens32 projects reviewed · 74 reports · latest Jul 2026
See Hexens’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us