Trueo security record
As of 28 Oct 2026, Trueo has 2 audit reports by 1 security firm on Trustblock; the latest is by Guardian Audits, dated 3 Nov 2025. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits2
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Trueo Uni V4 Review Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Trueo Final Report Updated | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
Findings72
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 2 | 12 |
| Medium | 2 | 7 | 19 |
| Low | 0 | 21 | 8 |
HighSecond Challenge Period Can Be BypassedTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportHighToken Holder Vote Cannot Be DisputedTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportMediumGriefing Via Forced Range Shift In Partial OrderTrueo Uni V4 Review Report · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportMediumDisputer Cannot Re-Dispute After ResetTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportMediumDoS In Dispute Process USDC Is PausedTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportMediumInefficient Distribution In StakingRewardsTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportMediumLacking Incentives For The EscalatorTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportMediumPossible DOS In _getTotalOpenDisputesTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportMediumRisk Of Re-org AttackTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowIncompatible Blacklist Checks Can Block TransferTrueo Uni V4 Review Report · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowPotential Order ID Exhaustion In getNextOrderIdTrueo Uni V4 Review Report · Guardian Audits · 3 Nov 2025Acknowledged
The report gives no description here.
Open the reportLowAccess Control Naming ConventionTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowBlock In _isValidTransition Never TriggeredTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowBond Amounts Not ValidatedTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowClear Data After Removing Council MemberTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowClear Data After Removing PauserTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowDisputes Allow Potential AbuseTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowIncorrect createdAt Timestamp In EscalationsTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowIncorrect TrueToken maxSupplyTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowMarket Creation Lacks Input ValidationTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowMarkets Can Be Created And Cancelled For ProfitTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowMax Council Members Can Be ViolatedTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowMismatched Event Parameter OrderTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowMissing setPaused Function In Market ManagerTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowOracleCouncil Can't Pause/Unpause MarketManagerTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowPotential Griefing To Mint TransactionsTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowReset By Council Cannot Be EscalatedTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowresolveEscalatedDispute Lacks Input ValidationTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowsetEndOfTrading Lacks Input ValidationTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportLowToken Loss Via Truncation In Burn() FunctionTrueo Final Report Updated · Guardian Audits · 8 Mar 2025Acknowledged
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="trueo"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us