Telcoin security record
As of 10 Nov 2026, Telcoin has 5 audit reports by 2 security firms on Trustblock; the latest is by Trail of Bits, dated 28 May 2026. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Audits1· Audit competitions 4
Newest first
| Report | Security firm | Date | Scope | Critical findings | Source |
|---|---|---|---|---|---|
| Telcoin Solana Peg Stability Vault | Security firm: Trail of Bits | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Telcoin Update 2 auditAudit competition | Security firm: Sherlock | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Telcoin Wallet auditAudit competition | Security firm: Sherlock | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Telcoin Platform Audit Update auditAudit competition | Security firm: Sherlock | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Telcoin Platform auditAudit competition | Security firm: Sherlock | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
Findings15
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 3 |
| Medium | 0 | 1 | 8 |
| Low | 0 | 0 | 0 |
HighCouncilMember:burn renders the contract inoperable after the first executionTelcoin Platform audit · Sherlock · 15 Jan 2024Fixed
The report gives no description here.
Open the reportHighStakingRewardsManager::topUp(...) Misallocates Funds to StakingRewards ContractsTelcoin Platform audit · Sherlock · 15 Jan 2024Fixed
The report gives no description here.
Open the reportHighWrong parameter when retrieving causes a complete DoS of the protocolTelcoin Platform audit · Sherlock · 15 Jan 2024Fixed
The report gives no description here.
Open the reportMediumClosed vault PDA can be reinitialized by an attackerTelcoin Solana Peg Stability Vault · Trail of Bits · 28 May 2026Fixed
The report gives no description here.
Open the reportMediumPermissionless vault initialization can capture vault controlTelcoin Solana Peg Stability Vault · Trail of Bits · 28 May 2026Fixed
The report gives no description here.
Open the reportMediumAmirX.defiToStablecoinSwap() doesn't verify the stable coin origin amount parameters after conducting the defi swap which might result in exceeding (violating) the burn limit of the origin XYZ stablecTelcoin Update 2 audit · Sherlock · 9 Nov 2024Fixed
The report gives no description here.
Open the reportMediumNot cleaning upper bits of certain data could lead to wallet being unaccessible foreverTelcoin Wallet audit · Sherlock · 9 Jun 2024Fixed
The report gives no description here.
Open the reportMediumBlacklisted accounts can still transact.Telcoin Platform Audit Update audit · Sherlock · 7 Mar 2024Fixed
The report gives no description here.
Open the reportMediumNot all ERC20 tokens can be bridged because of hardcoded PREDICATE_ADDRESSTelcoin Platform Audit Update audit · Sherlock · 7 Mar 2024Fixed
The report gives no description here.
Open the reportMediumSablier stream update in CouncilMember.sol can cause loss of funds if the streamed balance is not withdrawn.Telcoin Platform audit · Sherlock · 15 Jan 2024Fixed
The report gives no description here.
Open the reportShow 1 more
MediumThe CouncilMember contract DoS due to the _retrieve function revertTelcoin Platform audit · Sherlock · 15 Jan 2024Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="telcoin-1"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us