THENA security record

As of 21 Oct 2026, THENA has 4 audit reports by 3 security firms on Trustblock; the latest is by Hacken, dated 24 Feb 2025. Those reports list no open critical findings. It also holds 1 deployed contract on 1 chain.

Critical findings
No open critical findings
Across the 4 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it. See the findings
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.

Audits4

Newest first

AuditSecurity firmDateScopeCritical findingsReport
Thena AutomationsSecurity firm: HackenDate: Scope: 1 address on BNB ChainNo open critical findingsOpen · hacken.io
THENA-V3Security firm: HackenDate: Scope: 1 address on BNB ChainNo open critical findingsOpen · hacken.io
Retro/Thena AuditSecurity firm: OpenZeppelinDate: Scope: Files named in the report1 critical finding, fixedOpen · blog.openzeppelin.com
Thena Finance auditSecurity firm: PeckShieldDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub

Findings73

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical001
High105
Medium2211
Low5244
CriticalGauges Rewards Can Be Erroneously DeletedRetro/Thena Audit · OpenZeppelin · 26 Jun 2023Fixed

The report gives no description here.

Open the report
HighMissing Status and Cancellation Delay Checks in withdrawFunds FunctionThena Automations · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
HighIncorrect indexing in distribute functions leads to DoS and wrong distributionsTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
HighGaugeExtraRewarder Accounts for Excessive RewardsRetro/Thena Audit · OpenZeppelin · 26 Jun 2023Fixed

The report gives no description here.

Open the report
HighKilled Gauge Can Be Voted ForRetro/Thena Audit · OpenZeppelin · 26 Jun 2023Fixed

The report gives no description here.

Open the report
HighUsers Can Be Locked From VotingRetro/Thena Audit · OpenZeppelin · 26 Jun 2023Fixed

The report gives no description here.

Open the report
MediumInvalid Timestamp Handling in setRunTimestamp FunctionThena Automations · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
MediumToken Swap in depositFunds Not Handling FailureThena Automations · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
MediumUncleared approval in _removeTokenFrom function may lead to unauthorized controlTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
MediumGaugeExtraRewarder's Reward Rate Can Be Set to an Arbitrary ValueRetro/Thena Audit · OpenZeppelin · 26 Jun 2023Fixed

The report gives no description here.

Open the report
Show 10 more
Mediumgauges Mapping Cannot Be ClearedRetro/Thena Audit · OpenZeppelin · 26 Jun 2023Fixed

The report gives no description here.

Open the report
MediumRemoving a Role Does Not Remove the Role From All UsersRetro/Thena Audit · OpenZeppelin · 26 Jun 2023Fixed

The report gives no description here.

Open the report
MediumReward Amount in GaugeExtraRewarder Can Be OverestimatedRetro/Thena Audit · OpenZeppelin · 26 Jun 2023Fixed

The report gives no description here.

Open the report
MediumUnfair Distribution of RewardsRetro/Thena Audit · OpenZeppelin · 26 Jun 2023Fixed

The report gives no description here.

Open the report
MediumWrong Accounting of Extra Rewards Upon Depositing to a GaugeRetro/Thena Audit · OpenZeppelin · 26 Jun 2023Fixed

The report gives no description here.

Open the report
MediumImproved Airdrop Logic in AirdropClaim::setUserInfo()Thena Finance audit · PeckShield · 25 Mar 2023Fixed

The report gives no description here.

Open the report
MediumKilled Gauges Still Eligible For RewardsThena Finance audit · PeckShield · 25 Mar 2023Fixed

The report gives no description here.

Open the report
LowFloating PragmaThena Automations · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowUninitialized Variable newLockDurationThena Automations · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowUnused VariableThena Automations · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowViolation of the Checks-Effects-Interactions (CEI) patternThena Automations · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowBest practice violation due to usage of assert()THENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowCoarse-grained access controlTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowCommented code partsTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowHardcoded number literals should be defined as constantsTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowIncorrect NatSpec description of the _lock_end parameter in create_lock_for functionTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowLack of feedback in performUpkeep function executionTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowLack of named parameters mappingTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowLack of Pausable feature for user facing system contractsTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowMisleading comment in _distribute() and distribute()THENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
Show 10 more
LowMissing 0x0 address validationTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowMissing constant modifier for state variablesTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowMissing events emitting for critical functionsTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowMissing immutable keyword for state variablesTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowMissing method for removing elements from the rewardTokens arrayTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowMissing update of eidToChainID mapping in GenericLayerZero contractTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowRedundant assignment of variables increases gas consumptionTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowRedundant check of opBNBUpdateReady in EpochDistributorOpBNBTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowRedundant getters for the public state variablesTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowRedundant importsTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
Show 10 more
LowRedundant payable keyword in the update functionTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowRedundant variable assignment increases gas cost in Gauge and VotingIncentivesTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowReentrancyGuard custom implementationTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowSome public functions should be declared as externalTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowUnchecked return value of approve functionTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowUnnecessary and potentially dangerous receive() functionTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowUnnecessary constructor parameter _votingIncentivesFactory in VotingIncentives.solTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowUnused variable decimals in the VotingEscrowCrossChainTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowViolation of the Checks-Effects-Interactions (CEI) patternTHENA-V3 · Hacken · 25 May 2024Fixed

The report gives no description here.

Open the report
LowInvalid Entries Remain in _addressToRoles ArrayRetro/Thena Audit · OpenZeppelin · 26 Jun 2023Fixed

The report gives no description here.

Open the report
Show 10 more
LowInvalid Votes Are Counted Towards a User's Vote WeightRetro/Thena Audit · OpenZeppelin · 26 Jun 2023Fixed

The report gives no description here.

Open the report
LowLacking Address ChecksRetro/Thena Audit · OpenZeppelin · 26 Jun 2023Fixed

The report gives no description here.

Open the report
LowNo Events Emitted on Sensitive OperationsRetro/Thena Audit · OpenZeppelin · 26 Jun 2023Fixed

The report gives no description here.

Open the report
LowRecover Function Can Stall Associated GaugeRetro/Thena Audit · OpenZeppelin · 26 Jun 2023Fixed

The report gives no description here.

Open the report
LowUnsafe ABI EncodingRetro/Thena Audit · OpenZeppelin · 26 Jun 2023Fixed

The report gives no description here.

Open the report
LowUnsigned Integer Variable Declared and Treated as a Signed IntegerRetro/Thena Audit · OpenZeppelin · 26 Jun 2023Fixed

The report gives no description here.

Open the report
LowAccommodation of Non-ERC20-Compliant TokensThena Finance audit · PeckShield · 25 Mar 2023Fixed

The report gives no description here.

Open the report
LowImproper VotingEscrow Query in RewardsDistributorThena Finance audit · PeckShield · 25 Mar 2023Fixed

The report gives no description here.

Open the report
LowIncorrect Delegate/Voting Balance Accounting in VotingEscrowThena Finance audit · PeckShield · 25 Mar 2023Fixed

The report gives no description here.

Open the report
LowRevisited Proposal State For Cancellation in GovernorThena Finance audit · PeckShield · 25 Mar 2023Fixed

The report gives no description here.

Open the report
Show 1 more
LowSuggested Adherence Of Checks Effects Interactions PatternThena Finance audit · PeckShield · 25 Mar 2023Fixed

The report gives no description here.

Open the report

Contracts1

AddressChainSource code
0xf4c8e32eadec4bfe97e0f595add0f4450a863a11Chain: BNB ChainSource code: Verified source

All 1 address and the files the reports name

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
<div
data-tb-project-widget
data-tb-project-slug="thena"
></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us