Fungify security record
As of 21 Oct 2026, Fungify has 5 audit reports by 1 security firm on Trustblock; the latest is by Hexens, dated 25 Jun 2024. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits5
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Fungify security review | Security firm: Hexens | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Fungify Nft security review | Security firm: Hexens | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Fungify security review | Security firm: Hexens | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Fungify security review | Security firm: Hexens | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| Fungify security review | Security firm: Hexens | Date: | Scope: Not recorded (see the report) | 2 critical findings, fixed | Open · GitHub |
Findings32
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 3 |
| High | 0 | 1 | 6 |
| Medium | 0 | 2 | 7 |
| Low | 0 | 2 | 11 |
CriticalASSETS FROM INTEREST MARKETS CAN BE STOLEN THROUGH REWARD MANIPULATIONFungify security review · Hexens · 4 Dec 2023Fixed
The report gives no description here.
Open the reportCriticalALL INTEREST TOKENS CAN BE STOLEN FROM THE INTEREST MARKETFungify security review · Hexens · 6 Nov 2023Fixed
The report gives no description here.
Open the reportCriticalCERC20INTERESTMARKET COLLATERAL CAN BE DIRECTLY USED TO PAY INTEREST AND BYPASS HEALTH CHECKFungify security review · Hexens · 6 Nov 2023Fixed
The report gives no description here.
Open the reportHighThe incentive should not be applied to UNINCENTIVIZED tokensFungify security review · Hexens · 25 Jun 2024Fixed
The report gives no description here.
Open the reportHighVRF random NFT redemption can be manipulatedFungify security review · Hexens · 25 Jun 2024Fixed
The report gives no description here.
Open the reportHighWPUNKS have dynamic totalSupplyFungify security review · Hexens · 25 Jun 2024Fixed
The report gives no description here.
Open the reportHighNFT Minter exchange rate is not scaled to 18 decimalsFungify Nft security review · Hexens · 28 Feb 2024Fixed
The report gives no description here.
Open the reportHighCERC721 LIQUIDATION WILL ALWAYS REVERT IF INTEREST STATE IS UP-TO-DATEFungify security review · Hexens · 6 Nov 2023Fixed
The report gives no description here.
Open the reportHighLOANS WITH CERC721 COLLATERAL CAN BE MADE UNLIQUIDATABLEFungify security review · Hexens · 6 Nov 2023Fixed
The report gives no description here.
Open the reportMediumAttacker can drain contract's vrf balance using ERC721 callbackFungify security review · Hexens · 25 Jun 2024Fixed
The report gives no description here.
Open the reportShow 10 more
MediumIncorrect comparison between callBalance and stickerPrice can prevent the fulfillment of the redeem requestFungify security review · Hexens · 25 Jun 2024Fixed
The report gives no description here.
Open the reportMediumMissing slippage parameter in the deposit() functionFungify security review · Hexens · 25 Jun 2024Fixed
The report gives no description here.
Open the reportMediumSignature reuse across forksFungify security review · Hexens · 25 Jun 2024Fixed
The report gives no description here.
Open the reportMediumFungify NFT does not check or delete ERC4907 user information upon transferFungify Nft security review · Hexens · 28 Feb 2024Fixed
The report gives no description here.
Open the reportMediumMISSING SLIPPAGE PROTECTION IN THE LIQUIDATEBORROW FUNCTIONFungify security review · Hexens · 4 Dec 2023Fixed
The report gives no description here.
Open the reportMediumINADEQUATE CONSTRAINTS ON SEIZE SHARE MANTISSA IN THE PROTOCOLFungify security review · Hexens · 6 Nov 2023Fixed
The report gives no description here.
Open the reportLowAn incorrect assertion about totalVaultLiq in the function removeAsset()Fungify security review · Hexens · 25 Jun 2024Fixed
The report gives no description here.
Open the reportLowMissing limit checks in fee and buffer setting functionsFungify security review · Hexens · 25 Jun 2024Fixed
The report gives no description here.
Open the reportLowNo event is emmitted on Upgradeable.replaceImplementa tion()Fungify security review · Hexens · 25 Jun 2024Fixed
The report gives no description here.
Open the reportLowNo storage gaps in the inherited contractsFungify security review · Hexens · 25 Jun 2024Fixed
The report gives no description here.
Open the reportShow 7 more
LowStandard versions of libraries are used in the upgradeable contractsFungify security review · Hexens · 25 Jun 2024Fixed
The report gives no description here.
Open the reportLowThe fee calculation in NftIndex.redeem() is not accurateFungify security review · Hexens · 25 Jun 2024Fixed
The report gives no description here.
Open the reportLowUnnecessary receive function in NftIndexFungify security review · Hexens · 25 Jun 2024Fixed
The report gives no description here.
Open the reportLowSafe mint with onERC721Received callback should be used over mintFungify Nft security review · Hexens · 28 Feb 2024Fixed
The report gives no description here.
Open the reportLowOptimisation of NFT transfer out by IDFungify security review · Hexens · 13 Feb 2024Fixed
The report gives no description here.
Open the reportLowCUSTOM ERRORSFungify security review · Hexens · 6 Nov 2023Fixed
The report gives no description here.
Open the reportLowMISSING MAXIMUM LIMIT ON STALEPRICEDELAYFungify security review · Hexens · 6 Nov 2023Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="fungify"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us