Tokemak Acctoke Migration security review
Hexens reviewed Tokemak (Tokemak Acctoke Migration security review) on 7 Oct 2024: 7 findings, 1 critical; 6 marked fixed, 1 acknowledged.
1 critical finding, fixed
Open the reportOpen Tokemak’s security record
Report hosted on GitHub.
Trustblock does not review code.
Findings7
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 0 |
| Medium | 0 | 1 | 2 |
| Low | 0 | 0 | 3 |
CriticalBroken access control in DestinationVaultMainRewarder:: getReward allows destination vault rewarders to be drainedFixed
The report gives no description here.
MediumLack of StakingPointsExceeded check in AccToke's extend functionFixed
The report gives no description here.
MediumPotential Price Calculation Inaccuracy in Standard4626EthOracle.getPric eInEthFixed
The report gives no description here.
LowInconsistency Between Comment and Implementation in Staking Points CalculationFixed
The report gives no description here.
LowInefficient approval flow in AccToke migrationFixed
The report gives no description here.
LowWithdrawal requests deletion optimizationFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Tokemak’s security record
TokemakAudits6 audits by 2 firmsLast audit Mar 2025, by Hexens.
Critical findingsNo open critical findingsAcross the 6 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Tokemak’s security recordSecurity firm
Hexens32 projects reviewed · 75 reports · latest Jul 2026
See Hexens’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us