Dtravel security record
As of 21 Oct 2026, Dtravel has 3 audit reports by 2 security firms on Trustblock; the latest is by PeckShield, dated 18 Nov 2021. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits3
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Dtravel NFT audit | Security firm: PeckShield | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Dtravel TRVL audit | Security firm: PeckShield | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| TRVL | Security firm: CertiK | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · skynet.certik.com |
Findings8
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 1 | 1 | 0 |
| Low | 0 | 0 | 5 |
HighSafeMath not usedTRVL · CertiK · 7 May 2021Fixed
The safe math operation is not applied, this may easily result in overflow error.
Open the reportLowNo Secret After Mined In getPasscode()Dtravel NFT audit · PeckShield · 18 Nov 2021Fixed
The report gives no description here.
Open the reportLowSuggested Adherence Of Checks-Effects-Interactions PatternDtravel NFT audit · PeckShield · 18 Nov 2021Fixed
The report gives no description here.
Open the reportLowLack of input ValidationTRVL · CertiK · 7 May 2021Fixed
The input length of `to` addresses and `amount` are not having any validation consider this is a public function
Open the reportLowProper Usage of `public` and `external` typeTRVL · CertiK · 7 May 2021Fixed
`public` functions that are never called by the contract could be declared `external`. When the inputs are arrays `external` functions are more efficient than "public" functions. Examples: * `mintBatch()`
Open the reportLowProper Usage of `public` and `external` typeTRVL · CertiK · 7 May 2021Fixed
Public functions that are never called by the contract could be declared external. When the inputs are arrays external functions are more efficient than `public` functions. Public functions that are never called by the contract could be declared external. When the inputs are arrays external functions are more efficient than `public` functions.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="trvl"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us