TokenTable security record
As of 30 Oct 2026, TokenTable has 7 audit reports by 2 security firms on Trustblock; the latest is by CODESPECT, dated 28 Apr 2025. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits7
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| TokenTable - Merkle Token Distributor | Security firm: CODESPECT | Date: | Scope: Files named in the report | No open critical findings | Open · IPFS |
| TokenTable - UnlockerV2 | Security firm: CODESPECT | Date: | Scope: Files named in the report | No open critical findings | Open · IPFS |
| TokenTable - ECDSA Token Distributor | Security firm: CODESPECT | Date: | Scope: Files named in the report | No open critical findings | Open · IPFS |
| TokenTable - Solana Merkle Airdrop | Security firm: CODESPECT | Date: | Scope: Files named in the report | No open critical findings | Open · IPFS |
| TokenTable - Fractionalizer and SellNow | Security firm: CODESPECT | Date: | Scope: Files named in the report | 1 critical finding, fixed | Open · IPFS |
| Tokentable unlocker-v2 Solana version audit | Security firm: CODESPECT | Date: | Scope: Files named in the report | No open critical findings | Open · IPFS |
| Tokentable security review | Security firm: Nethermind Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
Findings31
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 4 |
| Medium | 0 | 0 | 8 |
| Low | 2 | 0 | 16 |
CriticalisApprovedForAll mapping allows arbitrary transfer of any segmentTokenTable - Fractionalizer and SellNow · CODESPECT · 10 Apr 2025Fixed
The report gives no description here.
Open the reportHighAggregator does not approve token spendingTokenTable - Fractionalizer and SellNow · CODESPECT · 10 Apr 2025Fixed
The report gives no description here.
Open the reportHighapproved segments don’t reset their approval after being transferredTokenTable - Fractionalizer and SellNow · CODESPECT · 10 Apr 2025Fixed
The report gives no description here.
Open the reportHighFees not considered in expectedAmount inside BuyerAggregatorTokenTable - Fractionalizer and SellNow · CODESPECT · 10 Apr 2025Fixed
The report gives no description here.
Open the reportHighNative ETH is not supported by SellNow contractTokenTable - Fractionalizer and SellNow · CODESPECT · 10 Apr 2025Fixed
The report gives no description here.
Open the reportMediumIncorrect Withdrawal Implementation May Lead to Lock of Unclaimed NFTsTokenTable - Merkle Token Distributor · CODESPECT · 28 Apr 2025Fixed
The report gives no description here.
Open the reportMediumFixed fees allow users to transfer all the project tokens from the Unlocker to the protocol ownerTokenTable - UnlockerV2 · CODESPECT · 25 Apr 2025Fixed
The report gives no description here.
Open the reportMediumThe upgrade permission for the protocol was assigned to the wrong roleTokenTable - ECDSA Token Distributor · CODESPECT · 23 Apr 2025Fixed
The report gives no description here.
Open the reportMediumDOS in BuyerAggregator’s confirm functionTokenTable - Fractionalizer and SellNow · CODESPECT · 10 Apr 2025Fixed
The report gives no description here.
Open the reportMediumArithmetic overflow in claim instructionTokentable unlocker-v2 Solana version audit · CODESPECT · 26 Mar 2025Fixed
The report gives no description here.
Open the reportShow 10 more
MediumCollision between PendingAmountClaimableForCancelledActualsAccount may lead to stolen fundsTokentable unlocker-v2 Solana version audit · CODESPECT · 26 Mar 2025Fixed
The report gives no description here.
Open the reportMediumIncorrect Preset input parameters validationTokentable unlocker-v2 Solana version audit · CODESPECT · 26 Mar 2025Fixed
The report gives no description here.
Open the reportMediumThe pending_amount_claimable accumulated in the cancel instruction cannot be claimedTokentable unlocker-v2 Solana version audit · CODESPECT · 26 Mar 2025Fixed
The report gives no description here.
Open the reportLowUpgrade Permission for the Protocol Assigned to the Project OwnerTokenTable - Merkle Token Distributor · CODESPECT · 28 Apr 2025Fixed
The report gives no description here.
Open the reportLowTracker token’s balanceOf will revert if address owns cancelled actualsTokenTable - UnlockerV2 · CODESPECT · 25 Apr 2025Fixed
The report gives no description here.
Open the reportLowTracker token’s totalSupply is always incorrectTokenTable - UnlockerV2 · CODESPECT · 25 Apr 2025Fixed
The report gives no description here.
Open the reportLowUnauthorized claims allowed when externalDelegateRegistry is not configuredTokenTable - UnlockerV2 · CODESPECT · 25 Apr 2025Fixed
The report gives no description here.
Open the reportLowUntitled findingTokenTable - Solana Merkle Airdrop · CODESPECT · 16 Apr 2025Fixed
The report gives no description here.
Open the reportLowDisallow aggregator withdrawals once the buyer side is confirmedTokenTable - Fractionalizer and SellNow · CODESPECT · 10 Apr 2025Fixed
The report gives no description here.
Open the reportLowUse call(...) instead of transfer(...)TokenTable - Fractionalizer and SellNow · CODESPECT · 10 Apr 2025Fixed
The report gives no description here.
Open the reportShow 9 more
LowClaims fail when different Token program is used for fees and claimable tokensTokentable unlocker-v2 Solana version audit · CODESPECT · 26 Mar 2025Fixed
The report gives no description here.
Open the reportLowLack of token_mint validation in the Deposit instructionTokentable unlocker-v2 Solana version audit · CODESPECT · 26 Mar 2025Fixed
The report gives no description here.
Open the reportLowMissing check whether fee_token and token_mint are consistent in the init_fee_token instructionTokentable unlocker-v2 Solana version audit · CODESPECT · 26 Mar 2025Fixed
The report gives no description here.
Open the reportLowMissing the is_withdrawable check in the withdraw_deposit(...) instructionTokentable unlocker-v2 Solana version audit · CODESPECT · 26 Mar 2025Fixed
The report gives no description here.
Open the reportLowWithdrawals from Fee Collector become impossible after renouncing ownershipTokentable unlocker-v2 Solana version audit · CODESPECT · 26 Mar 2025Fixed
The report gives no description here.
Open the reportLowERC777 reentrancy allows the founder to claim the same actual twiceTokentable security review · Nethermind Security · 27 Feb 2024Fixed
The report gives no description here.
Open the reportLowFuture token is starting with token_id = 2Tokentable security review · Nethermind Security · 27 Feb 2024Fixed
The report gives no description here.
Open the reportLowRounding to zero when calculating the linear interval for each unlock could cause a DOS and lock the funds indefinitelyTokentable security review · Nethermind Security · 27 Feb 2024Fixed
The report gives no description here.
Open the reportLowRounding when calculating the linear interval for each unlock can allow a recipient to claim more than intendedTokentable security review · Nethermind Security · 27 Feb 2024Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="tokentable"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us