Bitcorn security record

As of 21 Oct 2026, Bitcorn has 6 audit reports by 1 security firm on Trustblock; the latest is by Cantina, dated 28 Jul 2025. Those reports list no open critical findings.

Critical findings
No open critical findings
Across the 6 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it. See the findings
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.

Audits6

Newest first

AuditSecurity firmDateScopeCritical findingsReport
Bitcorn OFTSecurity firm: CantinaDate: Scope: Not recorded (see the report)No open critical findingsOpen · cantina.xyz
Web3 Security Review: Bitcorn Airdrop AuditSecurity firm: CantinaDate: Scope: Not recorded (see the report)No open critical findingsOpen · cantina.xyz
Bitcorn OFT Security AuditSecurity firm: CantinaDate: Scope: Not recorded (see the report)No open critical findingsOpen · cantina.xyz
Bitcorn Airdrop Contracts Security AuditSecurity firm: CantinaDate: Scope: Not recorded (see the report)No open critical findingsOpen · cantina.xyz
bitcorn-oftSecurity firm: CantinaDate: Scope: Not recorded (see the report)1 critical finding, fixedOpen · cantina.xyz
bitcorn-oft[69d1ec]Security firm: CantinaDate: Scope: Not recorded (see the report)No open critical findingsOpen · cantina.xyz

Findings38

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical001
High010
Medium027
Low0720
CriticalManipulated sendParam in swapExactCollateralForDebtAndLZSend function allows unauthorized token mintingbitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
MediumDepositing without checking health of underlying vault provides exit liquidity incase of shortfall / bad-debtBitcorn OFT · Cantina · 28 Jul 2025Fixed

The report gives no description here.

Open the report
MediumInaccessible pause mechanism in WrappedBitcornNativeOFTAdapterbitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
MediumInconsistent native fee validation leading to transaction failuresbitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
MediumSwapFacility.swapExactCollateralForDebt() calls by unvigilant users may be owner frontrunnable for value capture via feesbitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
MediumUncollected fees may be irrevocably burnt when calling SwapFacility.setMintCap() to be below feebitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
MediumInconsistent pause enforcement in WrappedBitcornNativeOFTAdapterbitcorn-oft[69d1ec] · Cantina · 12 Dec 2024Fixed

The report gives no description here.

Open the report
MediumWrappedBitcornNativeOFTAdapter.send doesn't refund excess sent for LayerZero feesbitcorn-oft[69d1ec] · Cantina · 12 Dec 2024Fixed

The report gives no description here.

Open the report
LowMissing gaps (or any kind of storage extension) in upgradeable contractsBitcorn OFT · Cantina · 28 Jul 2025Fixed

The report gives no description here.

Open the report
LowRepayment operations in MorphoModule will revert if BitcornOFTAdapter is pausedBitcorn OFT · Cantina · 28 Jul 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowPausing the contract does not pause voting delegationsBitcorn OFT Security Audit · Cantina · 8 Mar 2025Fixed

The report gives no description here.

Open the report
LowAvoid tightly packed variables as initial declarations in upgradeable contractbitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
LowCache state variables with multiple accesses within a scopebitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
LowCalls to SwapFacility._calcFee() with _feeRate of 0 will revert, but should be handledbitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
LowConsider removing whenNotPaused on permissioned functions, to aid in maintenance scenariosbitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
LowERC20Pausable is initialized twice in WrappedBitcornNativeOFTAdapterbitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
LowFunction sharedDecimals incorrectly marked as view instead of purebitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
LowIncorrect LayerZero token fee handlingbitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
LowIncorrect pause implementation results in confusing error messages in BitcornOFTbitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
LowMinor code quality issues: typosbitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
Show 8 more
LowRedundant fee initialization in _swapExactCollateralForDebt functionbitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
LowRemove unused _delegate parameter from BitcornOFT constructorbitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
LowRemove unused file importsbitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
LowRestrict visibility specifier to lowest necessary visibilitybitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
LowSwapFacility token buffer may be exhausted if collectFees() is frontrun by sufficient donation, leading to remediable DoSbitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
LowSwapInFeeRate and SwapOutFeeRate are applied differentlybitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
LowUtilize SafeERC20.safeTransferFrom() when interacting with 3rd-party tokensbitcorn-oft · Cantina · 14 Dec 2024Fixed

The report gives no description here.

Open the report
LowUsers sending small amounts (~Satoshi or less) to swapExactDebtForCollateral may get no collateralbitcorn-oft[69d1ec] · Cantina · 12 Dec 2024Fixed

The report gives no description here.

Open the report

Contracts

No deployed address is recorded for these audits.

The reports name a repository or files. Open a report to see its scope.

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
<div
data-tb-project-widget
data-tb-project-slug="bitcorn"
></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us