Europeum security record
As of 31 Oct 2026, Europeum has 9 audit reports by 1 security firm on Trustblock; the latest is by Hacken, dated 13 Aug 2026. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits9
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Europeum / TPR | Security firm: Hacken | Date: | Scope: Files named in the report | No open critical findings | Open · hacken.io |
| Europeum / TIR | Security firm: Hacken | Date: | Scope: Files named in the report | No open critical findings | Open · hacken.io |
| Europeum / Beacon Proxy | Security firm: Hacken | Date: | Scope: Files named in the report | No open critical findings | Open · hacken.io |
| Europeum / Track and Trace | Security firm: Hacken | Date: | Scope: Files named in the report | 1 critical finding, fixed | Open · hacken.io |
| Europeum / Timestamp | Security firm: Hacken | Date: | Scope: Files named in the report | No open critical findings | Open · hacken.io |
| Europeum / Bootstrap | Security firm: Hacken | Date: | Scope: Files named in the report | No open critical findings | Open · hacken.io |
| Europeum / TCR | Security firm: Hacken | Date: | Scope: Files named in the report | No open critical findings | Open · hacken.io |
| Europeum / DIDR | Security firm: Hacken | Date: | Scope: Files named in the report | No open critical findings | Open · hacken.io |
| Europeum / TSR | Security firm: Hacken | Date: | Scope: Files named in the report | No open critical findings | Open · hacken.io |
Findings117
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 1 | 4 |
| Medium | 2 | 1 | 11 |
| Low | 2 | 14 | 81 |
CriticalIncomplete Mapping Cleanup in removeDocument Restores Document Permissions and Events on Hash ReuseEuropeum / Track and Trace · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportHighMissing accessBySubjectIndex Update in removeDocument Causes Permanent Removal DoSEuropeum / Track and Trace · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportHighUngated initializeV2 Permanently Redirects policiesRegistryEuropeum / Track and Trace · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportHighOut-of-Bounds Array Access in insertRecordOwner Permanently Breaks Owner Re-AdditionEuropeum / Timestamp · Hacken · 12 Aug 2026Fixed
The report gives no description here.
Open the reportHighUnconditional Global Index Cleanup in detachRecordVersionHash Causes Irreversible Data CorruptionEuropeum / Timestamp · Hacken · 12 Aug 2026Fixed
The report gives no description here.
Open the reportMedium[Dual Defense] Identity-Namespace Confusion in grantAccess Grants WRITE on Any Document To an Unprivileged AttackerEuropeum / Track and Trace · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportMediumIncorrect Unchecked subjectAccountType Permanently Locks writeEventEuropeum / Track and Trace · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportMediumMissing Live-Ancestry Validation in checkEligibility Lets a TAO Clone Its Authority and Keep Accrediting After RevocationEuropeum / TIR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportMediumSentinel Collision in _getAccountAccess Enables Whitelist Document Permission Takeover of Zero-Hash DocumentsEuropeum / Track and Trace · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportMediumUnconstrained attributeIdTao in setAttributeMetadata Silently Re-Anchors an Existing Attribute to a Foreign RootTAOEuropeum / TIR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportShow 10 more
MediumUngated CREATOR Permission in grantAccess Enables Subject Type PoisoningEuropeum / Track and Trace · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportMediumUnsalted Revision Identifiers in a Global attributeMetadataStore Permit Permanent Exact-Value DenialEuropeum / TIR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportMediumMissing State Cleanup in detachRecordVersionHash Breaks Timestamp Re-attachment to RecordsEuropeum / Timestamp · Hacken · 12 Aug 2026Fixed
The report gives no description here.
Open the reportMediumMissing Revoked Guard in addVerificationRelationship Grants a Revoked Key Non-Revocable ControlEuropeum / DIDR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportMediumRolling a Capability Invocation Key to a Non-secp256k1 Key Strands Identifier ControlEuropeum / DIDR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportMediumScheduling a Future Expiry Revokes Control Immediately Instead of at the Scheduled TimeEuropeum / DIDR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLow[Dual Defense] Born-Dead Accreditations: Any TAO Can Brick Any DID's Attribute SlotEuropeum / TIR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLow[Dual Defense] Unbounded subjectAccount Length Lets a DELEGATE Brick revokeAccess and removeDocument Via Block Gas LimitEuropeum / Track and Trace · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLow[Dual Defense] Write-Once Event Storage in TrackAndTrace._writeEvent Lets Any WRITE Holder Permanently Burn an externalHash Slot and Plant an Unremovable Forged RecordEuropeum / Track and Trace · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowA Reverting checkPolicy Short-Circuits Every DID-Controller Fallback and Blocks Four of Five Write FunctionsEuropeum / TIR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowAccessRevoked Event Omits PermissionEuropeum / Track and Trace · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowAn Empty did Defeats the attributeMetadataStore Emptiness SentinelEuropeum / TIR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowBlacklist Does Not Affect Existing DocumentsEuropeum / Track and Trace · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowConstructor Doesn't Validate initialImplementation != address(0)Europeum / Beacon Proxy · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowDead and Unused Interface SurfaceEuropeum / Track and Trace · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowDeprecating The Current latestVersion Doesn't Stop New Proxies From Adopting ItEuropeum / Beacon Proxy · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowDuplicate children Push Corrupts DELEGATE Cascade IndexesEuropeum / Track and Trace · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowEmpty Payloads in the Proxy Functions Permanently Desynchronise proxies, proxyIndex and proxiesStoreEuropeum / TIR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowGeneric and Imprecise Revert Reasons Conflate Undefined and Inactive PoliciesEuropeum / TPR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowgetPaginationParameters Computes an Unused Cursor on the Out-of-Range Page PathEuropeum / TIR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowgetRevisionAttribute Does Not Bind revisionId to the Requested Attribute and Silently Returns the Wrong Attribute's StateEuropeum / TIR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowgetUserAttributes Returns Duplicate Names Across Scopes Despite Documented UniquenessEuropeum / TPR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowinitialize Can Be Declared externalEuropeum / TPR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowInitializer Grants Admin and Operator Roles to a Single Account and Removes Separation of DutiesEuropeum / TPR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowInterface Omits getVersionsCompatibilityEuropeum / Beacon Proxy · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowLoop Counters Use Post-Increment and Uncached Array LengthEuropeum / TPR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowMissing Zero-Address Checks in initialize and initializeV2Europeum / Track and Trace · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowNo Contract-existence Check on Implementation AddressesEuropeum / Beacon Proxy · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowPaginated Getters Return Clamped prev and next Values That Contradict the Documented Zero SentinelEuropeum / TPR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowRedundant Keccak256 Computation In _insertUserAttributeEuropeum / TPR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowRedundant State-Change Operations Are PermittedEuropeum / Beacon Proxy · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowRepeated Validation and Hashing Logic Duplicated Across Functions Instead of Shared Helpers or ModifiersEuropeum / TPR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowRevoked Is Not Terminal and No View or NatSpec Statement Conveys Effective Trust-Chain StatusEuropeum / TIR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowStorage policyCount Read Every Iteration in getPolicyNamesByIdsEuropeum / TPR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowTODO-Marked migrationRemoveDocument Left in Production CodeEuropeum / Track and Trace · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowUnconditional globalKey Hash Computation in _checkPolicyEuropeum / TPR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowUnconditional Set Insertion In _insertUserAttributeEuropeum / TPR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowupdateIssuerProxy Breaks the Content Commitment of proxyId and Blocks Re-Insertion of the Original PayloadEuropeum / TIR · Hacken · 13 Aug 2026Fixed
The report gives no description here.
Open the reportLowDetaching All Timestamps From a Version Renders Version Data Permanently InaccessibleEuropeum / Timestamp · Hacken · 12 Aug 2026Fixed
The report gives no description here.
Open the reportLowEvent RecordVersionInfo Has Non-Indexed recordId Parameter Reducing Off-Chain Query EfficiencyEuropeum / Timestamp · Hacken · 12 Aug 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowFront-Running Risk in timestampHashes Allows Adversaries to Capture Proof-of-Existence AttributionEuropeum / Timestamp · Hacken · 12 Aug 2026Fixed
The report gives no description here.
Open the reportLowFunction insertRecordOwner Allows Creating Owners With notAfter Set to Zero Resulting in Permanently Invalid OwnershipEuropeum / Timestamp · Hacken · 12 Aug 2026Fixed
The report gives no description here.
Open the reportLowInconsistent versionInfo Deduplication Logic Across Record FunctionsEuropeum / Timestamp · Hacken · 12 Aug 2026Fixed
The report gives no description here.
Open the reportLowMapping revokedOwnerIdsToBlockNum Is Only Reset and Never Set to Actual Block NumberEuropeum / Timestamp · Hacken · 12 Aug 2026Fixed
The report gives no description here.
Open the reportLowMissing Hash Value Length Validation Against Algorithm outputLength Allows Malformed TimestampsEuropeum / Timestamp · Hacken · 12 Aug 2026Fixed
The report gives no description here.
Open the reportLowMissing Uniqueness Check in updateHashAlgorithm Allows Duplicate Algorithm NamesEuropeum / Timestamp · Hacken · 12 Aug 2026Fixed
The report gives no description here.
Open the reportLowMissing Validation Allows timestampData Array to Exceed hashValues LengthEuropeum / Timestamp · Hacken · 12 Aug 2026Fixed
The report gives no description here.
Open the reportLowPagination Helper Returns prev and next in Reversed OrderEuropeum / Bootstrap · Hacken · 12 Aug 2026Fixed
The report gives no description here.
Open the reportLowSelf-Revocation in revokeRecordOwner Can Permanently Orphan RecordsEuropeum / Timestamp · Hacken · 12 Aug 2026Fixed
The report gives no description here.
Open the reportLowUnused Storage Mapping timestampIdToVersionId Increases Contract Complexity Without Providing FunctionalityEuropeum / Timestamp · Hacken · 12 Aug 2026Fixed
The report gives no description here.
Open the reportShow 10 more
Low[Dual Defense] rollVerificationMethod Accepts an Already-Expired capabilityInvocation Window, Locking the DID in a Single TransactionEuropeum / DIDR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLow[Dual Defense] rollVerificationMethod's Non-CapabilityInvocation Branch Skips the PublicKeyAlreadyInUse Guard, So Revoking the Duplicate Unbinds the Live capabilityInvocationEuropeum / DIDR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLow[Dual Defense] Unbounded Duration and Missing Unbind Resurrects Expired KeysEuropeum / DIDR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowCREATE2 Address Prediction Is Bound to msg.sender Instead of an Explicit DeployerEuropeum / TCR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowDead Condition in the isAuthorized ModifierEuropeum / TCR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowDead Storage Field in DidDocuments StructEuropeum / DIDR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowDeployed Proxies Cannot Be DeactivatedEuropeum / TCR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowdeployProxy Executes initialize() Before Proxy Code Is DeployedEuropeum / TCR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowDuplicate Deployment Information GettersEuropeum / TCR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowexpireVerificationMethod Accepts a Later Expiry and Can Extend Validity Instead of Shortening ItEuropeum / DIDR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowFloating PragmaEuropeum / DIDR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowgetAddress Performs No secp256k1 Curve-Point ValidationEuropeum / DIDR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowHardcoded Proxy Ownership Can Assign Upgrade Authority to the Calling ContractEuropeum / TCR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowInconsistent Validation of Unset Registry Dependencies Between ProxyFactory and ProxyTemplateRegistryEuropeum / TCR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowIProxyFactory Does Not Fully Represent the Factory’s External APIEuropeum / TCR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowMissing Initializer Selector Validation in addTemplateEuropeum / TCR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowMissing Secp256k1 Enforcement in addVerificationRelationship CapabilityInvocation Path Strands DID ControlEuropeum / DIDR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowNon-Deterministic CREATE2 Address Due to Live Beacon State in Salt DerivationEuropeum / TCR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowPaginated Template ID Getter Copies the Full ID Array Into MemoryEuropeum / TCR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowPagination Helper Returns prev and next in Reversed OrderEuropeum / TCR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowPermissionless Registration Accepts a Never-Valid Control Window Enabling Squatting and Permanent LockoutEuropeum / DIDR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowProxy Owner Is Not Recorded in Factory State or EventsEuropeum / TCR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowProxyDeployed Does Not Record the Effective Initialization CalldataEuropeum / TCR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowRegistry Events Omit Provenance-Critical FieldsEuropeum / TCR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowrevokeController Allows Removing the Last Controller and Locking Out the DIDEuropeum / DIDR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowrollVerificationMethod Sets the Relationship-Uniqueness Tuple Without the Add-Path GuardEuropeum / DIDR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowStrict Control Bounds Versus Inclusive Read-View Bounds Create a Boundary AsymmetryEuropeum / DIDR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLowUnbounded Iteration in getContractsByTemplateEuropeum / TCR · Hacken · 11 Aug 2026Fixed
The report gives no description here.
Open the reportLow[Dual Defense] _pushIfNew Leaves Latest Pointer Unchanged on Republish While Updates Still Report SuccessEuropeum / TSR · Hacken · 9 Aug 2026Fixed
The report gives no description here.
Open the reportLowCustom Errors Can Be Used for Gas EfficiencyEuropeum / TSR · Hacken · 9 Aug 2026Fixed
The report gives no description here.
Open the reportShow 7 more
LowDuplicate Revision And Metadata IDs Appended Without List-Level DeduplicationEuropeum / TSR · Hacken · 9 Aug 2026Fixed
The report gives no description here.
Open the reportLowFloating PragmaEuropeum / TSR · Hacken · 9 Aug 2026Fixed
The report gives no description here.
Open the reportLowInconsistent Input Validation Across Schema Revision GettersEuropeum / TSR · Hacken · 9 Aug 2026Fixed
The report gives no description here.
Open the reportLowinitialize Can Be Declared externalEuropeum / TSR · Hacken · 9 Aug 2026Fixed
The report gives no description here.
Open the reportLowMisleading schemaIdHash Event Field NameEuropeum / TSR · Hacken · 9 Aug 2026Fixed
The report gives no description here.
Open the reportLowMissing Membership Check In getSchemaRevisionMetadataByMetadataId Returns Cross-Provenance MetadataEuropeum / TSR · Hacken · 9 Aug 2026Fixed
The report gives no description here.
Open the reportLowRepeated Validation And Store Logic Should Be Extracted Into Shared Modifiers And Internal FunctionsEuropeum / TSR · Hacken · 9 Aug 2026Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="europeum"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us