Valuit security record

As of 3 Nov 2026, Valuit has 1 audit report on Trustblock, by Hacken, dated 24 Feb 2025. That report lists no open critical findings.

Critical findings
No open critical findings
In 1 report.
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.

Audits1

Newest first

AuditSecurity firmDateScopeCritical findingsReport
Valuit-ContractsSecurity firm: HackenDate: Scope: Repository at commit 3c97c10No open critical findingsOriginal removed

Findings45

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium006
Low0039
MediumInadequate Validation in deposit Function Leading to Potential Denial of ServiceValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
MediumIncorrect Order of Checks in canTransfer Leads to Potential Bypass of HoldTimeModule RestrictionsValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
MediumLack of Wrapper Status Validation in createWrapToken and toERC20 FunctionsValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
MediumMaxBalanceModule Restriction Interferes with Wrapping Process in ERC3643 Token SystemValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
MediumPrecision Loss in Fee Calculation for toERC20 and toERC3643 Functions Leads to Incorrect or Zero FeesValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
MediumStale Total Supply Data Leads to Incorrect Fee CalculationValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
Low`public` functions not called by the contract should be declared `external` insteadValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowCompliance Gap in ERC3643 to ERC20 Wrapping ProcessValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowConflict with ERC-1822 Slot in IdentityProxyValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowDiscrepancy Between NatSpec Documentation and Function Access Control in IdFactoryValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowDouble Admin Fee Charged During Wrapping and Unwrapping of TokensValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowGas Inefficiency and Lack of Input Validation in Batch Functions of EscrowControllerValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowImproper Plug-and-Play Configuration and Arbitrary Updates in HoldTimeModuleValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowImproper Storage Gap Placement and Absence in Upgradeable ContractsValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowInconsistent Frozen Asset Accounting in Token.solValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowInconsistent Redemption Logic in redemptionAndBurn Function Leads to Incorrect Fund TransfersValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowInconsistent Use of Transfer LibrariesValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowIncorrect Handling of ERC20 Token Rescue in rescueAnyERC20Tokens FunctionValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowIncorrect Usage of msg.sender in moduleCheck Function Causes Discrepancies in Hold Time ValidationValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowInefficient Fee Calculation in settlement FunctionValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowInefficient Use of Storage Variables in Multiple Functions of the Escrow ContractValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowLack of _disableInitializers() in Implementation Contracts of UUPS Compliance ModulesValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowLack of FundFactory Validation in EscrowControllerValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowLack of Wrapper Disabling Mechanism in ModularCompliance ContractValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowLimitation in IdentityRegistryStorage Preventing Recovery to Already Registered WalletsValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowMismanagement of Compliance Preset Status in MaxBalanceModule Allows Circumvention of Max Balance EnforcementValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowMissing Allowance Check in transferFrom Function of Token ContractValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowMissing Array Length Validation in Loop Structures in the Token contractValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowMissing Events in Key FunctionsValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowMissing Order Existence Check in settlement and rejectOrder FunctionsValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
Show 10 more
LowMissing Validation for Supply Limit in setSupplyLimit FunctionValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowMixing of Storage Variables and Events in Storage ContractsValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowNaming Errors in Function and Events NamesValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowOverwriting Parameters When Creating Funds or Equity Configurations for the Same TokenValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowRedundant Check in setHoldTime Function of HoldTimeModuleValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowRedundant Use of _proxy State Variable in FundFactory ContractValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowRepetitive Access Control Checks Across Multiple ContractsValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowRigid Admin Fee Structure Lacking Flexibility for Different Use CasesValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowThe usage of the precompile ecrecover can lead to signature mailabilityValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowUnnecessary Inheritance of OwnableUpgradeable Across Multiple ContractsValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
Show 5 more
LowUnrestricted AdminFee Setting Allows Excessive Fees and Potential Transaction RevertsValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowUnused and Duplicate ImportsValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowUpdating Stablecoin Addresses Can Cause Incorrect Token Transfers in Both EscrowController and Wrapper ContractsValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowUse of Mixed Floating and Strict Solidity Pragma VersionsValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report
LowViolation of the Checks-Effects-Interactions Pattern in settlement and rejectOrder FunctionsValuit-Contracts · Hacken · 24 Feb 2025Fixed

The report gives no description here.

Open the report

Contracts

No deployed address is recorded for these audits.

The reports name a repository or files. Open a report to see its scope.

The repositories and files the reports name

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
<div
data-tb-project-widget
data-tb-project-slug="valuit"
></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us