Right to Privacy / Railgun / Nov2021

HackenRepository at commit d2c6357

Audit

Hacken reviewed RAILGUN (Right to Privacy / Railgun / Nov2021) on 3 Nov 2021: 4 findings, 0 critical; all marked fixed.

No open critical findings
Open the reportOpen RAILGUN’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings4

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium002
Low002
MediumTest Unit FailedFixed

While 41 tests are passing, 1 is failing. It fails with the “Out of Gas” message which means your logic could be too complicated and overloaded with loops, maths, and external calls. …

MediumToo low test coverageFixed

Global test coverage is about 68% for code branches, while the main RailgunLogic contract is covered only for 57.89% of logic branches. The recommended coverage is minimum 95% for branches, while it should be definitely 100% for the main logic contracts.

LowA public function that could be declared externalFixed

`public` functions that are never called by the contract should be declared `external` to save gas.

LowMissing zero address validationFixed

Accidentally setting `_vestLockImplementation` to zero-address could lead to contract out of work because it doesn’t have the ability to update it in any way.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (24)

  • https://github.com/Railgun-Privacy/contract/logic/Poseidon.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/teststubs/TokenStubs.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/governance/Delegator.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/logic/TokenWhitelist.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/teststubs/logic/CommitmentsStub.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/governance/Deployer.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/logic/Commitments.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/governance/Staking.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/token/VestLock.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/teststubs/logic/TokenWhitelistStub.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/teststubs/proxy/ProxyTarget.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/logic/Snark.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/teststubs/governance/StakingStub.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/teststubs/governance/Getter.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/logic/RailgunLogic.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/governance/Voting.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/logic/Globals.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/treasury/Treasury.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/logic/Verifier.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/token/Distributor.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/proxy/ProxyAdmin.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/teststubs/governance/GovernanceTarget.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/token/Multisend.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111
  • https://github.com/Railgun-Privacy/contract/proxy/Proxy.sol at commit d2c63577ddd8310c87dced0d549cf9505b372111

Part of RAILGUN’s security record

RAILGUN
Audits8 audits by 2 firmsLast audit Feb 2023, by Zokyo.
Critical findingsNo open critical findingsAcross 8 reports.
Open RAILGUN’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us