As of 3 Nov 2026, OGLONG has 1 audit report on Trustblock, by QuillAudits, dated 20 Jul 2024. That report lists no open critical findings.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| OgLong | Security firm: QuillAudits | Date: | Scope: Files named in the report | No open critical findings | Open · quillaudits.com |
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 0 |
| Low | 1 | 0 | 4 |
The current implementation of the Burn function does not validate if the user is attempting to burn the correct token. This flaw allows users to burn any token, including valueless ones, which is then accounted for by the off-chain logic. Consequently, this can lead to significant financial loss as users could receive tokens on the other side of the bridge without burning the correct tokens.
Open the reportThe SetOwner function currently lacks proper validation to ensure that the new owner is the same as the og_mint authority. Without this validation, it is possible to set an inappropriate owner, which could break the program and disrupt its intended operations.
Open the reportCritical actions such as initialization and setting the owner do not emit events. The absence of events for these actions can lead to difficulties in tracking and auditing these operations off-chain, reducing transparency and traceability.
Open the reportThe Anchor.toml configuration file points to the developer's own wallet, which prevents others from running tests without modifying this file. This practice hinders collaboration and makes automated testing setups more difficult.
Open the reportThe current implementation uses msg! for logging and passing transaction strings to the mint and burn functions. This approach is not CU (Gas) optimized and is not optimal for tracking and deserializing events, which can complicate off-chain indexing and monitoring.
Open the reportThe reports name a repository or files. Open a report to see its scope.
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="oglong"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us