Alaya AI security record
As of 2 Nov 2026, Alaya AI has 1 audit report on Trustblock, by CertiK, dated 19 Mar 2024. That report lists no open critical findings.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Alaya - AlayaTraining | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
Findings7
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 1 | 0 | 0 |
| Low | 5 | 0 | 0 |
MediumLack Of Access ControlAlaya - AlayaTraining · CertiK · 19 Mar 2024Open
The function `update()` can be called by anyone as it has no access restriction. This enables anyone to call this and update the value of `userList[msg.sender]`, which will be used in public view function `listnum()` and function `anum()`
Open the reportLow`for` Loop OptimizationAlaya - AlayaTraining · CertiK · 19 Mar 2024Open
If a compiler version less than 0.8.22 is used, then the following operations can be done to optimize the gas usage: 1. The increment operation saves a small amount of gas if performed from the left (`++i`) instead of from the righthand side (`i++`). 2. The increment operation can be placed in an `unchecked` block at the end of the loop logic, since it is bounded above by the loop limit which must be a `uint256` value, avoiding overflow.
Open the reportLowDiscussion on `userList`Alaya - AlayaTraining · CertiK · 19 Mar 2024Open
The current codebase allows any user to call `update()` to update their own `userList`. The stored `userList` is only used in public view function `listnum()` and `anum()`.
Open the reportLowInconsistent Formatting and SpacingAlaya - AlayaTraining · CertiK · 19 Mar 2024Open
The formatting and spacing in the contract are inconsistent. Proper formatting is essential for readability and maintainability of the code. Reading and understanding the code becomes more challenging due to inconsistent formatting, which could lead to misunderstandings or overlooks during code review.
Open the reportLowUnnecessary InitializationAlaya - AlayaTraining · CertiK · 19 Mar 2024Open
The call `Ownable(msg.sender);` in the `constructor()` is unnecessary as the `constructor()` of the contract `Ownable` will already give ownership to the `_msgSender()` and does not take an input.
Open the reportLowUse `uint256` Instead of `uint`Alaya - AlayaTraining · CertiK · 19 Mar 2024Open
Throughout the codebase `uint` and `uint256` are used interchangeably.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="alaya-ai"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us