shredn security record
As of 3 Nov 2026, shredn has 1 audit report on Trustblock, by CertiK, dated 18 Oct 2022. That report lists no open critical findings.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| ShredN - Audit | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
Findings11
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 10 | 0 | 0 |
LowCheck Effect Interaction Pattern ViolatedShredN - Audit · CertiK · 18 Oct 2022Open
The order of external call/transfer and storage manipulation must follow the check-effect-interaction pattern.
Open the reportLowFinancial ModelsShredN - Audit · CertiK · 18 Oct 2022Open
The `ERC721GalaxyPair` equalizes the value of all NFTs, which may be contrary to the concept of NFT itself.
Open the reportLowHardcoded interface idShredN - Audit · CertiK · 18 Oct 2022Open
Hard-coded interface id should never be used to avoid unpredictable errors.
Open the reportLowLogical issue about `supportsInterface`ShredN - Audit · CertiK · 18 Oct 2022Open
The contract `ERC1155Pair` implements the interface `IERC1155Receiver` but always returns false in the function `supportsInterface`. So is the contract `ERC721GalaxyPair`.
Open the reportLowMissing check for amountShredN - Audit · CertiK · 18 Oct 2022Open
The mentioned functions do not check if `amount == 0`. If `amount == 0`, no operation should be performed.
Open the reportLowMissing Input ValidationShredN - Audit · CertiK · 18 Oct 2022Open
The given input is missing the check for the non-zero address.
Open the reportLowUnknown Implementation of GalaxyERC721ShredN - Audit · CertiK · 18 Oct 2022Open
The contract is serving as the underlying entity to interact with GalaxyERC721 protocols. The implementation is not found in the audit scope. The scope of the audit treats it as a black box and assumes its functional correctness.
Open the reportLowVariable could be declared as `constant`ShredN - Audit · CertiK · 18 Oct 2022Open
Variable `rate` is not initialized in constructor and has a default value 1000. It could be declared as constant since it's never changed.
Open the reportLowVariable Declare as ImmutableShredN - Audit · CertiK · 18 Oct 2022Open
The variable `owner` assigned in the constructor can declare with `Immutable`. Immutable state variables can be assigned during contract creation but will remain constant throughout the lifetime of a deployed contract. A big advantage of immutable variables is that reading them is significantly cheaper than reading from regular state variables since will not be stored in storage. Still, values will directly insert the values into the runtime code.
Open the reportLowVariable initialized but not usedShredN - Audit · CertiK · 18 Oct 2022Open
The variables `nftAmount` and `uri` of the struct `PairInfo` are initialized when pair created, but not updated after then.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="shredn"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us