Europeum / Track and Trace
Hacken reviewed Europeum (Europeum / Track and Trace) on 13 Aug 2026: 17 findings, 1 critical; 15 marked fixed, 1 acknowledged, 1 open.
Report hosted on hacken.io.
Trustblock does not review code.
Findings17
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 2 |
| Medium | 0 | 0 | 4 |
| Low | 1 | 1 | 8 |
CriticalIncomplete Mapping Cleanup in removeDocument Restores Document Permissions and Events on Hash ReuseFixed
The report gives no description here.
HighMissing accessBySubjectIndex Update in removeDocument Causes Permanent Removal DoSFixed
The report gives no description here.
HighUngated initializeV2 Permanently Redirects policiesRegistryFixed
The report gives no description here.
Medium[Dual Defense] Identity-Namespace Confusion in grantAccess Grants WRITE on Any Document To an Unprivileged AttackerFixed
The report gives no description here.
MediumIncorrect Unchecked subjectAccountType Permanently Locks writeEventFixed
The report gives no description here.
MediumSentinel Collision in _getAccountAccess Enables Whitelist Document Permission Takeover of Zero-Hash DocumentsFixed
The report gives no description here.
MediumUngated CREATOR Permission in grantAccess Enables Subject Type PoisoningFixed
The report gives no description here.
Low[Dual Defense] Unbounded subjectAccount Length Lets a DELEGATE Brick revokeAccess and removeDocument Via Block Gas LimitFixed
The report gives no description here.
Low[Dual Defense] Write-Once Event Storage in TrackAndTrace._writeEvent Lets Any WRITE Holder Permanently Burn an externalHash Slot and Plant an Unremovable Forged RecordFixed
The report gives no description here.
LowAccessRevoked Event Omits PermissionFixed
The report gives no description here.
Show 5 more
LowBlacklist Does Not Affect Existing DocumentsFixed
The report gives no description here.
LowDead and Unused Interface SurfaceFixed
The report gives no description here.
LowDuplicate children Push Corrupts DELEGATE Cascade IndexesFixed
The report gives no description here.
LowMissing Zero-Address Checks in initialize and initializeV2Fixed
The report gives no description here.
LowTODO-Marked migrationRemoveDocument Left in Production CodeFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (2)
- contracts/track-and-trace/contracts/libraries/TrackAndTraceLib.sol
- contracts/track-and-trace/contracts/TrackAndTrace.sol
Part of Europeum’s security record
EuropeumSecurity firm
Hacken343 projects reviewed · 476 reports · latest Sep 2026
See Hacken’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us