Unizen security record

Ethereum, Polygon (POS)unizen.ioXGitHub

As of 3 Nov 2026, Unizen has 2 audit reports by 1 security firm on Trustblock; the latest is by Hacken, dated 12 Feb 2025. Those reports list no open critical findings. It also holds 2 deployed contracts on 2 chains and 1 incident (latest 8 Mar 2024).

Critical findings
No open critical findings
Across the 2 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it. See the findings
Incident
Incident 8 Mar 2024
Source: De.Fi incident database. 2 audits have been published since. See the incident
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.

Audits2

Newest first

AuditSecurity firmDateScopeCritical findingsReport
Unizen-Solana-SwapSecurity firm: HackenDate: Scope: 2 addresses on Ethereum and Polygon (POS)No open critical findingsOpen · hacken.io
Unizen-Trade-AggregatorSecurity firm: HackenDate: Scope: 2 addresses on Ethereum and Polygon (POS)1 critical finding, fixedOpen · hacken.io

Findings38

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical001
High002
Medium105
Low16013
CriticalMissing Validation of Permit User in _routerTransferTokens FunctionUnizen-Trade-Aggregator · Hacken · 27 Nov 2024Fixed

The report gives no description here.

Open the report
HighLack of Access Control in LayerZero Configuration Functions Allows Unauthorized Alteration of Protocol SettingsUnizen-Trade-Aggregator · Hacken · 27 Nov 2024Fixed

The report gives no description here.

Open the report
HighMissing Initialization for Critical Variables Results in Contract Non-FunctionalityUnizen-Trade-Aggregator · Hacken · 27 Nov 2024Fixed

The report gives no description here.

Open the report
MediumInaccessible Functionality due to Read-Only AccountUnizen-Solana-Swap · Hacken · 12 Feb 2025Fixed

The report gives no description here.

Open the report
MediumIncorrect Parameter Usage and Ordering in setConfig and getConfig FunctionsUnizen-Trade-Aggregator · Hacken · 27 Nov 2024Fixed

The report gives no description here.

Open the report
MediumLack of Call Success Check in Native Asset WithdrawalUnizen-Trade-Aggregator · Hacken · 27 Nov 2024Fixed

The report gives no description here.

Open the report
MediumLack of Nonce or Order Tracking in GasLessExecutor Allows Replay Attacks by Authorized RelayersUnizen-Trade-Aggregator · Hacken · 27 Nov 2024Fixed

The report gives no description here.

Open the report
MediumMissing isETHTrade Logic in swapSimple FunctionUnizen-Trade-Aggregator · Hacken · 27 Nov 2024Fixed

The report gives no description here.

Open the report
LowRedundant Accounts in ContextUnizen-Solana-Swap · Hacken · 12 Feb 2025Fixed

The report gives no description here.

Open the report
LowRedundant Lifetime DeclarationsUnizen-Solana-Swap · Hacken · 12 Feb 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowBlocking Message Queue Handling in lzReceive May Halt Cross-Chain CommunicationUnizen-Trade-Aggregator · Hacken · 27 Nov 2024Fixed

The report gives no description here.

Open the report
LowInconsistent DEX Whitelisting Management Allows Unauthorized Access to Removed DEX FunctionsUnizen-Trade-Aggregator · Hacken · 27 Nov 2024Fixed

The report gives no description here.

Open the report
LowInconsistent User Address in lock Function Call for Cross-Chain DepositsUnizen-Trade-Aggregator · Hacken · 27 Nov 2024Fixed

The report gives no description here.

Open the report
LowLack of nonReentrant Protection in swapGasLessUnizen-Trade-Aggregator · Hacken · 27 Nov 2024Fixed

The report gives no description here.

Open the report
LowLack of Pausing Mechanism in Critical Functions of UnizenRouterUnizen-Trade-Aggregator · Hacken · 27 Nov 2024Fixed

The report gives no description here.

Open the report
LowLack of Verification Check in addOrRemoveFuncSign Allows Function Selectors for Unverified DEXesUnizen-Trade-Aggregator · Hacken · 27 Nov 2024Fixed

The report gives no description here.

Open the report
LowNot Leveraging LzApp for LayerZero IntegrationUnizen-Trade-Aggregator · Hacken · 27 Nov 2024Fixed

The report gives no description here.

Open the report
LowRedundant Use of SafeMath Leads to Unnecessary Gas Costs in Arithmetic OperationsUnizen-Trade-Aggregator · Hacken · 27 Nov 2024Fixed

The report gives no description here.

Open the report
LowSuboptimal Order of Validations in GasLessExecutor Increases Unnecessary Gas ConsumptionUnizen-Trade-Aggregator · Hacken · 27 Nov 2024Fixed

The report gives no description here.

Open the report
LowUnused WETH Address in BaseExecutorUnizen-Trade-Aggregator · Hacken · 27 Nov 2024Fixed

The report gives no description here.

Open the report
Show 1 more
LowUse of tx.origin for Access Control in GasLessExecutorUnizen-Trade-Aggregator · Hacken · 27 Nov 2024Fixed

The report gives no description here.

Open the report

Incidents1

Attached through a shared contract address. Our incident data ends in Oct 2026.

Incident

Incident,

Source: De.Fi incident database.

Audits before it
0.
Audits since
2, the latest dated 12 Feb 2025.

Contracts2

AddressChainSource code
0xc52c326331e9ce41f04484d3b5e5648158028804Chain: EthereumSource code: Verified source
0xdd75542611d57c4b6e68168b14c3591c539022edChain: Polygon (POS)Source code: Verified source

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
<div
data-tb-project-widget
data-tb-project-slug="unizen"
></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us