HyperCycle security record
As of 30 Oct 2026, HyperCycle has 5 audit reports by 2 security firms on Trustblock; the latest is by Paladin, dated 9 Sep 2024. Those reports list no open critical findings. It also holds 3 deployed contracts on 1 chain.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits5
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| HyperCycle ShareManager V2 | Security firm: Paladin | Date: | Scope: 1 address on Ethereum | No open critical findings | Open · IPFS |
| Audit Report - Share Tokens | Security firm: Paladin | Date: | Scope: 1 address on Ethereum | No open critical findings | Open · IPFS |
| Audit Report - HyperCycle Swap V2 | Security firm: Paladin | Date: | Scope: 1 address on Ethereum | No open critical findings | Open · IPFS |
| Hypercycle / ERC20 + ERC721 | Security firm: Hacken | Date: | Scope: Files named in the report | No open critical findings | Open · hacken.io |
| HyperCycle / Staking + Marketplace | Security firm: Hacken | Date: | Scope: Files named in the report | 1 critical finding, fixed | Open · hacken.io |
Findings91
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 11 |
| Medium | 3 | 1 | 14 |
| Low | 2 | 5 | 54 |
CriticalInvalid Validation; Funds Lock; Data ConsistencyHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportHighChanging the share manager contract leads to stuck surplus that cannot be withdrawnHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportHighcHyPC owner can steal license token and most of the HyPC tokens that were meant for distribution after proposal endsHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportHighMissing approvals when sending tokens leads to DOSHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportHighshareToken owner can game the migration flowHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportHighUsers can claim more tokens from hypcSurplus than they shouldHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportHighLicense holders that do not deposit cHyPC tokens upon shares creation will have their license token locked foreverAudit Report - Share Tokens · Paladin · 14 Dec 2023Fixed
The report gives no description here.
Open the reportHighSplitting of tokens will result in duplicate tokenIDsAudit Report - HyperCycle Swap V2 · Paladin · 31 Oct 2023Fixed
The report gives no description here.
Open the reportHighRequirements ViolationHypercycle / ERC20 + ERC721 · Hacken · 20 Sep 2023Fixed
The report gives no description here.
Open the reportHighRace Condition; Undocumented BehaviourHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportShow 10 more
HighRequirements ViolationHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportHighUndocumented BehaviourHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportMediumAmbiguous ownership requirement when completing shareProposal creationHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportMediumCancellation of share migration can be frontrunHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportMediumIf operatorRevenue is changed, the amount that can be claimed by the previous rules changes as wellHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportMediumImprecise formula for computing revenue for the hardware operator results in less rewardsHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportMediumMigrated proposals can be completed individually, resulting in loss of share tokens and revenueHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportMediumThe incorrect revenueDepositDelay can be set for a shareProposal during migrationHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportMediumPotential manipulation of the license valueAudit Report - HyperCycle Swap V2 · Paladin · 31 Oct 2023Fixed
The report gives no description here.
Open the reportMediumInefficient Gas ModelHypercycle / ERC20 + ERC721 · Hacken · 20 Sep 2023Fixed
The report gives no description here.
Open the reportShow 10 more
MediumNatSpec ContradictionHypercycle / ERC20 + ERC721 · Hacken · 20 Sep 2023Fixed
The report gives no description here.
Open the reportMediumUndocumented FunctionalityHypercycle / ERC20 + ERC721 · Hacken · 20 Sep 2023Fixed
The report gives no description here.
Open the reportMediumInconsistent DataHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportMediumInefficient Gas ModelHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportMediumRace Condition; Undocumented BehaviourHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportMediumUnfinalized CodeHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowImproper check inside claimHypcPortionAndSurplus()HyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportLowLack of minimum/maximum thresholds allows the creation of proposals with unsafe revenue delaysHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportLowMigration allows the creation of shareProposals that could be canceled immediatelyHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportLowNo minimum duration for proposal deadlinesHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowPotential re-entrancy inside _completeProposal()HyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportLowThe Events.HypcClaimed event is incorrectly emittedHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportLowThe system can be spammed with proposalsHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportLowTypographical issuesHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportLowVoting in certain cases does not close the voting and can alter the end resultHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportLowwToken holders cannot control how many tokens to deposit as their voting powerHyperCycle ShareManager V2 · Paladin · 9 Sep 2024Fixed
The report gives no description here.
Open the reportLowArithmetic issuesAudit Report - Share Tokens · Paladin · 14 Dec 2023Fixed
The report gives no description here.
Open the reportLowAssigned license number upon share creation is not unassigned when the share is closedAudit Report - Share Tokens · Paladin · 14 Dec 2023Fixed
The report gives no description here.
Open the reportLowChecks-Effects-Interactions pattern is not adhered toAudit Report - Share Tokens · Paladin · 14 Dec 2023Fixed
The report gives no description here.
Open the reportLowConstructor input validation check for endNumber can be addedAudit Report - Share Tokens · Paladin · 14 Dec 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowInsufficient input validation for ownership transferAudit Report - Share Tokens · Paladin · 14 Dec 2023Fixed
The report gives no description here.
Open the reportLowMissing input validation of share ids on ERC1155 transfersAudit Report - Share Tokens · Paladin · 14 Dec 2023Fixed
The report gives no description here.
Open the reportLowTypographical issuesAudit Report - Share Tokens · Paladin · 14 Dec 2023Fixed
The report gives no description here.
Open the reportLowGas optimizationsAudit Report - HyperCycle Swap V2 · Paladin · 31 Oct 2023Fixed
The report gives no description here.
Open the reportLowString is not backed by valuesAudit Report - HyperCycle Swap V2 · Paladin · 31 Oct 2023Fixed
The report gives no description here.
Open the reportLowSwaps can potentially be DoS’edAudit Report - HyperCycle Swap V2 · Paladin · 31 Oct 2023Fixed
The report gives no description here.
Open the reportLowThe tree is hard to queryAudit Report - HyperCycle Swap V2 · Paladin · 31 Oct 2023Fixed
The report gives no description here.
Open the reportLowViolation of the checks-effects-interactions patternAudit Report - HyperCycle Swap V2 · Paladin · 31 Oct 2023Fixed
The report gives no description here.
Open the reportLowBest Practice Violation - Checks-Effects-Interactions PatternHypercycle / ERC20 + ERC721 · Hacken · 20 Sep 2023Fixed
The report gives no description here.
Open the reportLowMissing Events for Critical Value UpdatesHypercycle / ERC20 + ERC721 · Hacken · 20 Sep 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowMissing Zero Address ValidationHypercycle / ERC20 + ERC721 · Hacken · 20 Sep 2023Fixed
The report gives no description here.
Open the reportLowRedundant CodeHypercycle / ERC20 + ERC721 · Hacken · 20 Sep 2023Fixed
The report gives no description here.
Open the reportLowRedundant CodeHypercycle / ERC20 + ERC721 · Hacken · 20 Sep 2023Fixed
The report gives no description here.
Open the reportLowRedundant View FunctionsHypercycle / ERC20 + ERC721 · Hacken · 20 Sep 2023Fixed
The report gives no description here.
Open the reportLowSolidity Style Guide ViolationHypercycle / ERC20 + ERC721 · Hacken · 20 Sep 2023Fixed
The report gives no description here.
Open the reportLowUndocumented ParameterHypercycle / ERC20 + ERC721 · Hacken · 20 Sep 2023Fixed
The report gives no description here.
Open the reportLowUnused VariableHypercycle / ERC20 + ERC721 · Hacken · 20 Sep 2023Fixed
The report gives no description here.
Open the reportLowUsage of Magic NumberHypercycle / ERC20 + ERC721 · Hacken · 20 Sep 2023Fixed
The report gives no description here.
Open the reportLowBest Practice ViolationHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowBoolean EqualityHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowConstant VariablesHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowContradictionHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowContradiction - Revert MessageHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowFloating PragmaHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowFunctions That Can Be Declared ExternalHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowImmutable VariablesHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowInterfaces MismatchHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowMissed ModifierHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowMissing ValidationHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowMissing ValidationHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowMissing Zero Address ValidationHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowModification Of A Well-Known ContractHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowRedundant CheckHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowRedundant State VariableHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowStyle Guide Violation - Naming MismatchHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowTyposHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowUnused IdentifierHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowUnused IdentifierHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowUnused ImportHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportLowVariable ShadowingHyperCycle / Staking + Marketplace · Hacken · 29 May 2023Fixed
The report gives no description here.
Open the reportContracts3
| Address | Chain | Source code |
|---|---|---|
| 0xc5d5b9f30aa674aa210a0ec24941bad7d8b42069 | Chain: Ethereum | Source code: Verified source |
| 0x21468e63abf3783020750f7b2e57d4b34afafba6 | Chain: Ethereum | Source code: Verified source |
| 0x9d21a23cd33d7e56a69e0b103828dd5a67f50666 | Chain: Ethereum | Source code: Verified source |
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="hypercycle"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us