Mangachain security record
As of 3 Nov 2026, Mangachain has 1 audit report on Trustblock, by QuillAudits, dated 18 Nov 2024. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Mangachain | Security firm: QuillAudits | Date: | Scope: Files named in the report | No open critical findings | Open · quillaudits.com |
Findings6
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 0 | 5 |
MediumAnyone in the whitelist is able to call withdrawMangachain · QuillAudits · 18 Nov 2024Fixed
The withdraw() function intents to withdraw funds for first five owners.However, isOwners modifier allows all 10 of them to call. This is not the expected behavior since it allows anyone apart from first five owner to call withdraw
Open the reportLow_updateOwnerInfos should have an added safety checkMangachain · QuillAudits · 18 Nov 2024Fixed
The _updateOwnerInfos function assumes that the newOwnerInfos array contains exactly 10 elements, but this is not enforced with a require statement. This can lead to unintended behavior if an incorrect array length is passed during deployment.
Open the reportLowLack of error message in modifierMangachain · QuillAudits · 18 Nov 2024Fixed
The onlyDeployer modifier doesn't include an error message, leading to a default "revert" without clarity.
Open the reportLowRedundant fallback functionMangachain · QuillAudits · 18 Nov 2024Fixed
Both fallback and receive functions are present but don't implement distinct behaviors, making one redundant.
Open the reportLowRedundant State VariableMangachain · QuillAudits · 18 Nov 2024Fixed
If the whitelist functionality is hardcoded and there's no intention to use Merkle trees, remove silverMerkleRoot and goldMerkleRoot to simplify the contract. This will save gas cost by removing state variables
Open the reportLowRedundant Whitelist EntryMangachain · QuillAudits · 18 Nov 2024Fixed
The _setupWhiteLists function has duplicate entries for some addresses (e.g., 0xAb8483F64d9C6d1EcF9b849Ae677dD3315835cb2 and 0x4B20993Bc481177ec7E8f571ceCaE8A9e22C02db .
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="mangachain"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us