Harambe AI Token security record
As of 3 Nov 2026, Harambe AI Token has 1 audit report on Trustblock, by CertiK, dated 5 Feb 2024. That report lists no open critical findings. It also holds 1 deployed contract on 1 chain.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Harambe AI Token | Security firm: CertiK | Date: | Scope: 1 address on Ethereum | No open critical findings | Open · skynet.certik.com |
Findings5
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 0 |
| Medium | 0 | 1 | 0 |
| Low | 3 | 0 | 0 |
HighInitial Token DistributionHarambe AI Token · CertiK · 5 Feb 2024Acknowledged
All of the `Harambe AI Token` tokens are sent to the hard-coded address `0x06D344b9ada316c83C30110Ca6029d49961eC907`. This is a centralization risk because this account can distribute tokens without obtaining the consensus of the community. Any compromise to this account may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project.
Open the reportMediumFunction Calls User-Provided Addresses With No AcHarambe AI Token · CertiK · 5 Feb 2024Acknowledged
Calling a user provided address is dangerous, especially in a public function with no access control restriction. An attacker could deploy a malicious contract and use the vulnerable function to trigger a call to the malicious contract, potentially stealing user funds or causing other serious damages. In this contract, if an approver mistakenly approves a malicious spender by calling the `approveAndCall` function, the spender can immediately callback to this contract and spend the entire approved allowance within the same transaction, leaving no chance for the approver to revoke the allowance. We would like to discuss this finding with the team to ensure that the design is intentional.
Open the reportContracts1
| Address | Chain | Source code |
|---|---|---|
| 0x5484581038cbf8ef33b7f6daec7a2f01f71db3c2 | Chain: Ethereum | Source code: Verified source |
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="harambe-token"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us