B3x.ai security record
As of 30 Oct 2026, B3x.ai has 1 audit report on Trustblock, by QuillAudits, dated 8 Jan 2025. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| B3x. | Security firm: QuillAudits | Date: | Scope: Files named in the report | No open critical findings | Open · quillaudits.com |
Findings5
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 2 |
| Low | 0 | 0 | 3 |
MediumArbitrary from is used instead of msg.sender in trans- Resolved ferFromB3x. · QuillAudits · 8 Jan 2025Fixed
In contract sale.sol, there is depositUsdc() function in which the user deposits the usdc amount to get the project’s B3X tokens in return. Here on L105 there is transferFrom function in which beneficiary variable is used for from parameter. If a userA has approval of tokens from some other userB for some tokens then userA can put userB as beneficiary which will result in draining the funds of userB.
Open the reportMediumSale can be initialized more than onceB3x. · QuillAudits · 8 Jan 2025Fixed
In contract sale.sol, there is Initialize() function where the owner calls the function to set the sale starting and ending time period. The issue here is that Initialize() function can be called many times with different start and end times. There is no direct harm but say if the attacker gets access to the owner's private key and then can access the contract. There won’t be any monetary problem but it’ll result in users' deposits getting denied if sale is initialized more than once.
Open the reportLowAllocated amount should be more than 100K B3X tokensB3x. · QuillAudits · 8 Jan 2025Fixed
In token sale contract currently the user amount deposit calculation is dependent on how much B3X tokens are in the contract therefore, if user is to deposit 2000 USDC which is maximum token allowed to buy B3X tokens then at-least more than 100K B3X tokens should be present for first few users to deposit/buy with full 2000 USDC amount.
Open the reportLowMissing zero address checkB3x. · QuillAudits · 8 Jan 2025Fixed
In constructor() of the contract sale.sol there should be a check for zero address for b3x and usdc contracts. Even though it does not seem necessary and owner is trusted and puts correct addresses. To actually ensure safety it is recommended to use zero address check.
Open the reportLowSolidity pragma should be specific not wideB3x. · QuillAudits · 8 Jan 2025Fixed
Consider using a specific version of Solidity in your contracts instead of a wide version. For example, instead of pragma solidity ^0.8.0;, use pragma solidity 0.8.0;
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="b3xai"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us