Hexagon Finance security record
As of 3 Nov 2026, Hexagon Finance has 1 audit report on Trustblock, by Paladin, dated 29 Apr 2022. That report lists no open critical findings.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Audit Report | Security firm: Paladin | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · paladinsec.co |
Findings55
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 1 | 5 |
| Medium | 0 | 2 | 5 |
| Low | 6 | 6 | 29 |
HighcancelLeave transfers from msg.sender to msg.senderAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportHighdeposit and boostDeposit do not support fee-on-transfer tokensAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportHighGovernance Privilege: setFlake can be set again and prevent users from depositing or withdrawing from the contractAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportHighGovernance Privilege: setMulsigAndFarmChef can be used to change the farmChef address to an EOA or a malicious contract which could cause the theft of users their boostedTokensAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportHighThe pending variable is perpetually boosted and rewards excessive rewardTokenAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportMediumgetLeaveApplyHistory does not work as intendedAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportMediumGovernance Privilege: setLeavingTerm can be set to an arbitrarily high value by the governanceAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportMediumminBoostAmount can only be 0 or 500 etherAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportMediumThe rewarder is called with a zero oldAmount on emergencyWithdrawAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportMediumUnsafe casts are made throughout the contract that can cause issuesAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportShow 10 more
Low_amount and _share should be required to be greater than zero in the various external functionsAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowenter function does not support fee-on-transfer tokensAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowgetTeamRatio, getTotalBoostedAmount, boostStakedFor and boostTotalStaked can be made externalAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowGovernance Privilege: Owner can burn other users’ tokensAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowInconsistent usage of SafeMath functionsAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowInconsistent usage of SafeMath functionsAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowInconsistent usage of uint256Audit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowLack of events for function setFlake, setLeavingTerm, setMulsigAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowLack of events on privileged functionsAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowLack of safeTransfer usage within enter and leaveAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportShow 10 more
Lowmint function can be used to pre-mint large amounts of tokens before ownership is transferred to MiniChefV2Audit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowname, symbol and decimals can be made externalAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowpid can be made immutableAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowSeveral functions can be made externalAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowSeveral functions can be made externalAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowThe AddAuthorization and RemoveAuthorization events are unusedAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowThe Enter, Leave, ApplyLeave, and CancelLeave events are indexing amounts which are unnecessaryAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowThe first user could steal the tokens deposited by the next users by manipulating the share valueAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowThe pending reward function will revert if totalAllocPoint is zeroAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowThe searchPendingIndex function might not pick the last index if that value occurs multiple timesAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportShow 9 more
LowToken amounts can be made more readable by separating the digits into thousandsAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowTypographical errorsAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowTypographical errorsAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowUnnecessary casting of tokenDecimal to uint8Audit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowUnnecessary typing of tokenDecimal to uint256 while casting it to uint8Audit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowUnused import: SmallNumbers.solAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowUnused importsAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowUnused imports and approvalAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportLowUnused variables: noncesAudit Report · Paladin · 29 Apr 2022Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="hexagon-finance"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us