As of 1 Nov 2026, Tegro has 2 audit reports by 2 security firms on Trustblock; the latest is by QuillAudits, dated 18 Mar 2024. Those reports list 1 open critical finding. It also holds 1 deployed contract on 1 chain.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Tegro | Security firm: QuillAudits | Date: | Scope: Files named in the report | No open critical findings | Open · quillaudits.com |
| Tegro | Security firm: Cyberscope | Date: | Scope: 1 address on BNB Chain | 1 open critical finding | Open · IPFS |
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 1 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 4 | 0 | 6 |
The report gives no description here.
Open the reportThe transaction executor can be anyone who can enter the matchedAmount. The matchedAmount can be entered in the way where the calculated baseFeeAmount would be rounded down to 0.E.g While calculating fee on L207 if the feeAmount is 20 and matchedAmount is 499 then the calculation would be: 499 * 20 / 10000 = 0 (In solidity). The same can happen while calculating quoteFeeAmount using totalPrice. The above example shows that if the numerator is less than the denominator then the answer can be rounded down to 0 which will allow an executor to bypass the fees on a small portion of the amount. The successful attack depends on the amount of tokens that are getting sold/bought, but to perform this attack recursively to bypass the fee, it might not be feasible as every transaction would cost the gas (also depends on who pays the fee or who is executing the signed orders). But it would be good practice to add a lower limit for the amount so that if the matchedAmount is less than that specified limit then the transaction will revert.
Open the reportWhile using fee-on-transfer tokens (as baseToken or quoteToken), the amount that will get actually transferred would be less than what is getting transferred because of fee deductions.This doesn’t create any security issues but can create confusion on the receiver side.
Open the reportThe report gives no description here.
Open the reportThe report gives no description here.
Open the report| Address | Chain | Source code |
|---|---|---|
| 0xd978…9da50xd9780513292477c4039dfda1cfcd89ff111e9da5 | Chain: BNB Chain | Source code: Verified source |
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="tegro"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us