Cryptoart.com Audit Report
Cyfrin reviewed CRYPTOART (Cryptoart.com Audit Report) on 24 Apr 2025: 7 findings, 0 critical; 6 marked fixed, 1 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings7
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 1 | 5 |
Marked Gas or Informational by the firm. Not counted as findings.
Gasburn should delete tokenURI related data and emit TokenUriUnpinned eventFixed
The report gives no description here.
InformationalConsider limiting max royalty to prevent large amount or all of the sale fee being taken as royaltyFixed
The report gives no description here.
GasIn tokenURI avoid copying entire _tokenURIs[tokenId] from storage into memoryFixed
The report gives no description here.
InformationalMintType is almost never enforcedFixed
The report gives no description here.
GasPrefer named return parameters, especially for memory returnsFixed
The report gives no description here.
InformationalProtocol vulnerable to cross-chain signature replayFixed
The report gives no description here.
GasRemove obsolete onlyTokenOwner from _transferToNftReceiverFixed
The report gives no description here.
InformationalRemove unused constant CryptoartNFT::ROYALTY_BASEFixed
The report gives no description here.
InformationalSignatures have no expiration deadlineFixed
The report gives no description here.
GasTo prevent duplicate ids in _batchBurn, enforce ascending order instead of nested for loopsFixed
The report gives no description here.
Show 1 more
GasUse named constants to indicate purpose of magic numbersFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of CRYPTOART’s security record
Security firm
Cyfrin28 projects reviewed · 79 reports · latest Sep 2026
See Cyfrin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us