Cheelee security record
As of 3 Nov 2026, Cheelee has 1 audit report on Trustblock, by CertiK, dated 7 Feb 2023. That report lists no open critical findings.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
Findings14
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 3 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 0 | 10 |
MediumLack of Validation for Vesting AmountsCheelee · CertiK · 7 Feb 2023Fixed
The following values are critical to the contract vesting logic and should be validated to ensure they are set to values that do not disrupt contract logic. - beneficiary[_beneficiaryAddress].duration = _durationSeconds; - beneficiary[_beneficiaryAddress].cliff = _cliff; - beneficiary[_beneficiaryAddress].amount += _amount; For example, there should be a check ensuring that `_durationSeconds` > 0.
Open the reportLowComparison to Boolean ConstantCheelee · CertiK · 7 Feb 2023Fixed
Boolean constants can be used directly and do not need to be compared to true or false. ```solidity=45 if (registeredUserMap[msg.sender] == false) { ``` --- ```solidity=117 require(usedSignature[_nonce] == false, "Signature already used"); ``` --- ```solidity=142 require(usedSignature[_nonce] == false, "Signature already used"); ```
Open the reportLowDifferent Solidity VersionsCheelee · CertiK · 7 Feb 2023Fixed
Multiple Solidity versions are used in the codebase. Versions used: `^0.8.0`, `^0.8.4`, and `^0.8.13`
Open the reportLowERC20Permit NameCheelee · CertiK · 7 Feb 2023Fixed
According to the OpenZeppelin library `draft-ERC20Permit.sol`, it is recommended to use the same `name` for the ERC20Permit declaration that is defined as the ERC20 token name.
Open the reportLowFunctions Should Be Declared `external`Cheelee · CertiK · 7 Feb 2023Fixed
Functions which are never called internally by the contract should have external visibility for gas optimization.
Open the reportLowMissing Emit EventsCheelee · CertiK · 7 Feb 2023Fixed
There should always be events emitted in the sensitive functions that are controlled by centralization roles.
Open the reportLowMissing Zero Address ValidationCheelee · CertiK · 7 Feb 2023Fixed
Addresses should be checked before assignment or external call to make sure they are not zero addresses.
Open the reportLowToo Many DigitsCheelee · CertiK · 7 Feb 2023Fixed
Literals with many digits are difficult to read and review. ```solidity=10 uint256 public constant MAX_AMOUNT = 1000000000 * 10**18; ``` --- ```solidity=8 uint256 public constant MAX_VALUE = 7000000000 * 10**18; ``` --- ```solidity=11 uint256[] public emission = [ 1750000000000000000000000000, 3150000000000000000000000000, 4550000000000000000000000000, 5600000000000000000000000000, 6300000000000000000000000000, MAX_VALUE ]; ```
Open the reportLowTyposCheelee · CertiK · 7 Feb 2023Fixed
In the contract `LEE.sol`, there are two typographical errors to be changed. 1. "CHEELEE" is misspelled in the constructor on line 25 2. Grammatical error in the error message on line 32, which should be changed to the following: ```solidity=32 "Can't mint more than max amount" ``` ---- In the contracts `IVesting.sol` and `MultiVesting.sol`, the function `emergancyVest()` is misspelled and should be changed to the following: ```solidity function emergencyVest() external; ```
Open the reportLowUnchecked ERC-20 `transfer()`/`transferFrom()` CaCheelee · CertiK · 7 Feb 2023Fixed
The return value of the `transfer()`/`transferFrom()` call is not checked.
Open the reportShow 1 more
LowUse of `ether` For UnitsCheelee · CertiK · 7 Feb 2023Fixed
The use of the unit **ether** for the uint arrays `minAmount` and `maxAmount` can be misleading and cause confusion, as the amounts are referring to tokens and not **Ether**, the native cryptocurrency for the Ethereum blockchain.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="cheelee"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us