Everclear security review
Audit · firm’s term: security review
Hexens reviewed Everclear (Everclear security review) on 7 Jan 2026: 9 findings, 1 critical; all marked fixed.
Report hosted on GitHub.
Trustblock does not review code.
Findings9
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 5 |
| Low | 0 | 0 | 3 |
CriticalAttacker can block account creation causing user funds to become lockedFixed
The report gives no description here.
MediumBatch intent creation in new order fails due to reused message accountsFixed
The report gives no description here.
MediumFee handling is skipped when fee adapter is pausedFixed
The report gives no description here.
MediumFee signature not bound to intent data allows signature reuseFixed
The report gives no description here.
MediumMissing type hashes in signature digestsFixed
The report gives no description here.
MediumSettle delivered intent can be executed while pausedFixed
The report gives no description here.
LowConfusing endian conversion for settlement amountFixed
The report gives no description here.
LowPrecision loss for high-decimal tokens during intent creation and settlementFixed
The report gives no description here.
LowSame signer account for fees and intent fills violates PoLPFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Everclear’s security record
EverclearSecurity firm
Hexens32 projects reviewed · 75 reports · latest Jul 2026
See Hexens’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us