Gain security record
As of 3 Nov 2026, Gain has 3 audit reports by 1 security firm on Trustblock; the latest is by Zokyo, dated 22 Jan 2024. Those reports list no open critical findings.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Audits3
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Gain Smart Contract Review Audit · firm’s term: smart contract review | Security firm: Zokyo | Date: | Scope: Repository at commit cfaaac2 | No open critical findings | Open · IPFS |
| Gain Smart Contract Review | Security firm: Zokyo | Date: | Scope: Repository at commit 4886ba3 | No open critical findings | Open · IPFS |
| Gain. | Security firm: Zokyo | Date: | Scope: Repository at commit 973c76e | No open critical findings | Open · IPFS |
Findings20
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 3 |
| Low | 0 | 0 | 17 |
MediumNo Access Control In startDistribution()Gain Smart Contract Review · Zokyo · 22 Jan 2024Fixed
The report gives no description here.
Open the reportMediumSignature proof not including a domain separatorGain Smart Contract Review · Zokyo · 22 Jan 2024Fixed
The report gives no description here.
Open the reportMediumWrong Guard FunctionGain. · Zokyo · 6 Feb 2023Fixed
The report gives no description here.
Open the reportLowAbsence of SafeERC20 library in ERC20 asset transferGain Smart Contract Review · Zokyo · 22 Jan 2024Fixed
The report gives no description here.
Open the reportLowclaimNativeToken Can Be Removed From ERC20Distribution.solGain Smart Contract Review · Zokyo · 22 Jan 2024Fixed
The report gives no description here.
Open the reportLowComments For ERC20Distribution and ERC20DistributionNative Are SameGain Smart Contract Review · Zokyo · 22 Jan 2024Fixed
The report gives no description here.
Open the reportLowInconsistency between rate calculation and comment in ERC20DistributionNativeGain Smart Contract Review · Zokyo · 22 Jan 2024Fixed
The report gives no description here.
Open the reportLowIncreased deployment cost due to extended error messagesGain Smart Contract Review · Zokyo · 22 Jan 2024Fixed
The report gives no description here.
Open the reportLowSender identification discrepancyGain Smart Contract Review · Zokyo · 22 Jan 2024Fixed
The report gives no description here.
Open the reportLowUnnecessary redundant variableGain Smart Contract Review · Zokyo · 22 Jan 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowFunctions that do not expect to receive ether should be non-payableGain Smart Contract Review · Zokyo · 29 May 2023Fixed
The report gives no description here.
Open the reportLowInvalid data emitted by eventGain Smart Contract Review · Zokyo · 29 May 2023Fixed
The report gives no description here.
Open the reportLowLack of protection against user’s excessive ether lossGain Smart Contract Review · Zokyo · 29 May 2023Fixed
The report gives no description here.
Open the reportLowPossibility of pre-distribution balance manipulationGain Smart Contract Review · Zokyo · 29 May 2023Fixed
The report gives no description here.
Open the reportLowUncalled public functionsGain Smart Contract Review · Zokyo · 29 May 2023Fixed
The report gives no description here.
Open the reportLowUse immutable on variables that are only set at constructionGain Smart Contract Review · Zokyo · 29 May 2023Fixed
The report gives no description here.
Open the reportLowGas optimizationGain. · Zokyo · 6 Feb 2023Fixed
The report gives no description here.
Open the reportLowGas optimizationGain. · Zokyo · 6 Feb 2023Fixed
The report gives no description here.
Open the reportLowSetter applied with no event emittedGain. · Zokyo · 6 Feb 2023Fixed
The report gives no description here.
Open the reportLowUnnecessary operationGain. · Zokyo · 6 Feb 2023Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="gain"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us