RAIN security record
As of 14 Oct 2026, RAIN has 2 audit reports by 1 security firm on Trustblock; the latest is by Hacken, dated 5 Jun 2026. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Statuses are the security firms’ own. Trustblock does not review code.
Audits2
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Rain / Prediction Markets | Security firm: Hacken | Date: | Scope: Files named in the report | No open critical findings | Open · hacken.io |
| RAIN / Token | Security firm: Hacken | Date: | Scope: Files named in the report | No open critical findings | Open · hacken.io |
Findings56
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 2 |
| Medium | 1 | 4 | 8 |
| Low | 1 | 4 | 35 |
HighInverted Arguments in _swapTokenForWETHV2 Bypass RAIN Burn and Block Settlements Across All V2 Non-WETH MarketsRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportHighswapAndBurn Catch Drains Pooled Reserves and Strands WETHRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportMediumcalculateWinnerReadOnly Return Value Ignored, Permanently Blocking claimRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportMediumenterOption AMM Path Lacks minSharesOut and deadline, Exposing Users to Ordering-Driven SlippageRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportMediumgetEntryShares Preview Diverges From enterOption On Multi-Tick OrdersRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportMediumNo Post-Only Option in placeSellOrder and placeBuyOrder Forces Intended Makers to Pay Taker FeesRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportMediumOn-chain Quoter Calls in swapAndBurn Cause enterOption to Exhaust Gas on Large OB OrdersRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportMediumtooEarly Seizes the User Supplied Bond Instead of Refunding itRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportMediumUnwrapped Base-to-WETH Dispatch in swapAndBurn Rolls Back Matched FillsRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportMediumZero-Fill Dust Orders Fail to Terminate Order-Book Walks, Corrupting Head-of-Book PointersRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowcancelSellOrders and cancelBuyOrders Fail to Advance firstSellOrderPrice and firstBuyOrderPrice, Causing Stale Price ReadsRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowChecks-Effects-Interactions Violation in claim Sets One-Shot Latch After Resolver CallbacksRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowcreatePool Uses Raw transferFrom for the Two Oracle-Fee PullsRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowDiamond Does Not Register supportedInterfaces for EIP-165 / EIP-2535Rain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowenterLiquidity / enterLiquidityBatch / removeLiquidity Lack minYesOut / minNoOut and deadline, Exposing LPs to Uncontrolled Position CompositionRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowenterLiquidityBatch Skip Logic Reverts; Enables Cheap DoSRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowFee Setters Lack Upper-Bound Validation Brick Future Pools' ResolutionRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowFloating PragmaRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowIncorrect NatSpec in _calculateNumberOfOracles Misstates Oracle Base CountRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowIncorrect NatSpec in _calculateNumberOfOracles Misstates Oracle SizingRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowIncorrect Token Address Passed to _swapTokenForWETHV2 and _swapTokenForWETHV3 Grants Unnecessary WETH AllowanceRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowIRainDeployer.initialize Interface Diverges; Silent Parameter ShiftRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowLow Order Execution Fee on Post-Creator-Fee Base Underfunds ProtocolRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowMissing and Mis-Ordered option Bounds Checks in Resolution and Dispute Facets Surface Misleading RevertsRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowMissing Events on Privileged Setters Across the CodebaseRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowMissing Minimum Amount Check in enterOption Allows Fee-Free Trades, Reducing LP ReturnsRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowMissing Zero-Address Validation in RainDeployerRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowOdd Creator Fee in referrerCreatorClaim Strands One Wei Per CallRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowopenDispute Emits ResolverSet With the Stale Pool-Level Resolver Instead of the Just-Assigned Per-Option ResolverRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLoworacleFixedFee Incorrectly Paid to disputeResolver Instead of poolOwner on Disputed but Non-Appealed PoolsRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowPHASE_B_DELAY Freezes Order Book for 60s on Late closePoolRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowplaceSellOrder, placeBuyOrder, and enterOption Advance Best-Price Pointers Beyond Valid Tick Bounds When No Remaining Orders ExistRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowPlatformClaim Unconditionally Emitted at End of swapAndBurnRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowPost-Bootstrap LP Deposit Below Share Value Mints 0 SharesRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowsetBaseToken Retroactively Breaks createOracle for Every Pre-Existing PoolRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowswapAndBurn Dead else Branch Silently Transfers baseToken if Activated by Future RefactorRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowswapAndBurn Quoter Revert Disables Slippage, Enables MEV SandwichRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowUnguarded refund in _firstClaimCheck Can Lock Option FundsRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowUniswapV2Library pairFor Uses the Canonical Init-Code Hash and Computes Wrong Pair Addresses for All Non-Canonical V2 ForksRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportLowUnsafe uint128 Cast Without SafeCast at Four V4 Quote Sites Allows Silent Swap Amount TruncationRain / Prediction Markets · Hacken · 5 Jun 2026Fixed
The report gives no description here.
Open the reportShow 5 more
LowFloating PragmaRAIN / Token · Hacken · 25 Aug 2025Fixed
The report gives no description here.
Open the reportLowMisaligned USD Cap Calculation Due to USDT Peg AssumptionRAIN / Token · Hacken · 25 Aug 2025Fixed
The report gives no description here.
Open the reportLowMissing Two-Step Ownership Transfer Increases Risk of Permanent Owner LossRAIN / Token · Hacken · 25 Aug 2025Fixed
The report gives no description here.
Open the reportLowMissing Visibility on totalInflationMinted Prevents Tracking of Total Minted InflationRAIN / Token · Hacken · 25 Aug 2025Fixed
The report gives no description here.
Open the reportLowRedundant State InitializationRAIN / Token · Hacken · 25 Aug 2025Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="rain"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us