ritestream security record
As of 3 Nov 2026, ritestream has 4 audit reports by 1 security firm on Trustblock; the latest is by QuillAudits, dated 18 Jul 2024. Those reports list no open critical findings.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Audits4
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| RiteStream Bridge Audit Audit · firm’s term: audit | Security firm: QuillAudits | Date: | Scope: Files named in the report | No open critical findings | Open · quillaudits.com |
| Ritestream-staking | Security firm: QuillAudits | Date: | Scope: Files named in the report | No open critical findings | Open · quillaudits.com |
| RiteStream - Subscription Contract | Security firm: QuillAudits | Date: | Scope: Files named in the report | No open critical findings | Open · quillaudits.com |
| Ritestream(Vault,team,sale) | Security firm: QuillAudits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · quillaudits.com |
Findings40
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 1 | 1 | 5 |
| Low | 3 | 5 | 24 |
HighUntitled findingRitestream(Vault,team,sale) · QuillAudits · 7 Mar 2022Fixed
The report gives no description here.
Open the reportMediumUntitled findingRitestream-staking · QuillAudits · 22 Aug 2023Fixed
The report gives no description here.
Open the reportMediumUntitled findingRitestream-staking · QuillAudits · 22 Aug 2023Fixed
The report gives no description here.
Open the reportMediumSubscription can be overwrittenRiteStream - Subscription Contract · QuillAudits · 12 Jul 2023Fixed
As the function signature is the same and the hash created also follows the same pattern, it is possible to overwrite a subscription by mistake.
Open the reportMediumUntitled findingRitestream(Vault,team,sale) · QuillAudits · 7 Mar 2022Fixed
The report gives no description here.
Open the reportMediumUntitled findingRitestream(Vault,team,sale) · QuillAudits · 7 Mar 2022Fixed
The report gives no description here.
Open the reportLowUntitled findingRitestream-staking · QuillAudits · 22 Aug 2023Fixed
The report gives no description here.
Open the reportLowUntitled findingRitestream-staking · QuillAudits · 22 Aug 2023Fixed
The report gives no description here.
Open the reportLowUntitled findingRitestream-staking · QuillAudits · 22 Aug 2023Fixed
The report gives no description here.
Open the reportLowCheck Effect Interaction pattern not followedRiteStream - Subscription Contract · QuillAudits · 12 Jul 2023Fixed
The functions subscribe and updateSubscriptionPlan transfers the RITE tokens from msg.sender before updating contract states. As RITE token is not a part of this contract, it is assumed that it can be used to reenter the functions and exploit the function to double spend subscription in updateSubscriptionPlan.
Open the reportShow 10 more
LowContracts without storage gap.RiteStream - Subscription Contract · QuillAudits · 12 Jul 2023Fixed
It is recommended to add a gap in the contract to avoid storage collision in future if the current contract is upgraded and extended.
Open the reportLowFollow solidity style guide and naming conventionsRiteStream - Subscription Contract · QuillAudits · 12 Jul 2023Fixed
Parameter Subscription.initialize(address)._RITE (contracts/Subscription.sol#37) is not in mixedCaseParameter Subscription.subscribe(uint256,Signature)._signature (contracts/Subscription.sol#65) is not in mixedCase Parameter Subscription.updateSubscriptionPlan(uint256,Signature)._signature (contracts/Subscription.sol#97) is not in mixedCase Variable Subscription.RITE (contracts/Subscription.sol#29) is not in mixedCase Variable Subscription._operator (contracts/Subscription.sol#30) is not in mixedCase Constant Subscription.fixedOwnerAddress (contracts/Subscription.sol#32-33) is not in UPPER_CASE_WITH_UNDERSCORES Constant Token.fixedOwnerAddress (contracts/Token.sol#12-13) is not in UPPER_CASE_WITH_UNDERSCORES Reference: https://github.com/crytic/slither/wiki/Detector-Documentation#conformance-to-solidity-naming-conventions
Open the reportLowMissing checksRiteStream - Subscription Contract · QuillAudits · 12 Jul 2023Fixed
It is recommended to add a check for address(0) while setting the operator as it is used in validating signatures in subscriptions.
Open the reportLowMissing event emission in setOperatorRiteStream - Subscription Contract · QuillAudits · 12 Jul 2023Fixed
The function setOperator does not emit an event on updating operator.
Open the reportLowSignature can be reused multiple timesRiteStream - Subscription Contract · QuillAudits · 12 Jul 2023Fixed
As the message hash created follows the same pattern in subscribe and updateSubscriptionPlan, it is possible to reuse it any number of times and increase the duration. Users will still have to pay but this can go against operator’s permission unless operator is updated.
Open the reportLowUnwanted require statementsRiteStream - Subscription Contract · QuillAudits · 12 Jul 2023Fixed
Following require statements can be removed from line number 68 and 101 as msg.sender can never be zero address.
Open the reportLowUntitled findingRitestream(Vault,team,sale) · QuillAudits · 7 Mar 2022Fixed
The report gives no description here.
Open the reportLowUntitled findingRitestream(Vault,team,sale) · QuillAudits · 7 Mar 2022Fixed
The report gives no description here.
Open the reportLowUntitled findingRitestream(Vault,team,sale) · QuillAudits · 7 Mar 2022Fixed
The report gives no description here.
Open the reportLowUntitled findingRitestream(Vault,team,sale) · QuillAudits · 7 Mar 2022Fixed
The report gives no description here.
Open the reportShow 10 more
LowUntitled findingRitestream(Vault,team,sale) · QuillAudits · 7 Mar 2022Fixed
The report gives no description here.
Open the reportLowUntitled findingRitestream(Vault,team,sale) · QuillAudits · 7 Mar 2022Fixed
The report gives no description here.
Open the reportLowUntitled findingRitestream(Vault,team,sale) · QuillAudits · 7 Mar 2022Fixed
The report gives no description here.
Open the reportLowUntitled findingRitestream(Vault,team,sale) · QuillAudits · 7 Mar 2022Fixed
The report gives no description here.
Open the reportLowUntitled findingRitestream(Vault,team,sale) · QuillAudits · 7 Mar 2022Fixed
The report gives no description here.
Open the reportLowUntitled findingRitestream(Vault,team,sale) · QuillAudits · 7 Mar 2022Fixed
The report gives no description here.
Open the reportLowUntitled findingRitestream(Vault,team,sale) · QuillAudits · 7 Mar 2022Fixed
The report gives no description here.
Open the reportLowUntitled findingRitestream(Vault,team,sale) · QuillAudits · 7 Mar 2022Fixed
The report gives no description here.
Open the reportLowUntitled findingRitestream(Vault,team,sale) · QuillAudits · 7 Mar 2022Fixed
The report gives no description here.
Open the reportLowUntitled findingRitestream(Vault,team,sale) · QuillAudits · 7 Mar 2022Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="ritestream-home"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us