HELLO Labs security record
As of 3 Nov 2026, HELLO Labs has 3 audit reports by 2 security firms on Trustblock; the latest is by Hacken, dated 24 May 2024. Those reports list 1 open critical finding. It also holds 3 deployed contracts on 3 chains.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Audits3
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Hello Labs / Bridge Rust | Security firm: Hacken | Date: | Scope: 3 addresses on Ethereum, BNB Chain and Solana | 1 open critical finding | Open · hacken.io |
| Hello Labs / Bridge + Voting | Security firm: Hacken | Date: | Scope: 3 addresses on Ethereum, BNB Chain and Solana | 3 critical findings, fixed | Open · hacken.io |
| Hello.one - Audit 2 | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
Findings46
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 1 | 0 | 3 |
| High | 2 | 0 | 2 |
| Medium | 0 | 0 | 1 |
| Low | 17 | 0 | 20 |
CriticalInsufficient validation allows anyone to perform fake depositsHello Labs / Bridge Rust · Hacken · 24 May 2024Open
The report gives no description here.
Open the reportHighCentralization Risks in Main.solHello.one - Audit 2 · CertiK · 11 Oct 2022Open
In the contract `Main` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and recover any tokens or ether for themselves, enable/disable trading between non-authorized users, airdrop `H1T3` from any address to any address, whitelist accounts, and change the max wallet limit. 
Open the reportHighInitial Token DistributionHello.one - Audit 2 · CertiK · 11 Oct 2022Open
All of the `H1T3` tokens are sent to whoever first calls the function `initialize()`. This could be a centralization risk as the initializer can distribute `H1T3` tokens without obtaining the consensus of the community.
Open the reportLowArithmetic operations may panic on overflowHello Labs / Bridge Rust · Hacken · 24 May 2024Open
The report gives no description here.
Open the reportLowCentralization concernsHello Labs / Bridge Rust · Hacken · 24 May 2024Open
The report gives no description here.
Open the reportLowInsufficient validation of mint account during initializationHello Labs / Bridge Rust · Hacken · 24 May 2024Open
The report gives no description here.
Open the reportLowMissing events emissionHello Labs / Bridge Rust · Hacken · 24 May 2024Open
The report gives no description here.
Open the reportLowMissing two-step ownership transferHello Labs / Bridge Rust · Hacken · 24 May 2024Open
The report gives no description here.
Open the reportLowUnbounded loops may lead to denial of serviceHello Labs / Bridge Rust · Hacken · 24 May 2024Open
The report gives no description here.
Open the reportLowVulnerable dependencies in useHello Labs / Bridge Rust · Hacken · 24 May 2024Open
The report gives no description here.
Open the reportShow 10 more
Lowabi.encodePacked() Should Not Be Used With Dynamic TypesHello Labs / Bridge + Voting · Hacken · 20 May 2024Open
The report gives no description here.
Open the reportLowChecks-Effects-Interactions Pattern ViolationHello Labs / Bridge + Voting · Hacken · 20 May 2024Open
The report gives no description here.
Open the reportLowCustom Errors in Solidity for Gas EfficiencyHello Labs / Bridge + Voting · Hacken · 20 May 2024Open
The report gives no description here.
Open the reportLowMissing Checks For address(0) In constructor/initializersHello Labs / Bridge + Voting · Hacken · 20 May 2024Open
The report gives no description here.
Open the reportLowMissing Checks For address(0) When Updating State VariablesHello Labs / Bridge + Voting · Hacken · 20 May 2024Open
The report gives no description here.
Open the reportLowMissing Contract Existence Checks Before low-level CallHello Labs / Bridge + Voting · Hacken · 20 May 2024Open
The report gives no description here.
Open the reportLowMissing Event EmittingHello Labs / Bridge + Voting · Hacken · 20 May 2024Open
The report gives no description here.
Open the reportLowReturn values of transfer()/transferFrom() not checkedHello Labs / Bridge + Voting · Hacken · 20 May 2024Open
The report gives no description here.
Open the reportLowUnused Error DefinitionHello Labs / Bridge + Voting · Hacken · 20 May 2024Open
The report gives no description here.
Open the reportLowUse Ownable2Step Rather Than OwnableHello Labs / Bridge + Voting · Hacken · 20 May 2024Open
The report gives no description here.
Open the reportContracts3
| Address | Chain | Source code |
|---|---|---|
| 0x0f1cbed8efa0e012adbccb1638d0ab0147d5ac00 | Chain: BNB Chain | Source code: Verified source |
| 4h49hPGphLNJNDRyiBwzvKoasR3rw1WJCEv19PhUbSS4 | Chain: Solana | |
| 0x411099c0b413f4feddb10edf6a8be63bd321311c | Chain: Ethereum | Source code: Verified source |
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="hello-labs"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us