Venom Foundation security record

Avalanche, BNB Chain, Ethereum, Fantom, Polygon (POS)venom.foundationGitHub

As of 25 Oct 2026, Venom Foundation has 3 audit reports by 1 security firm on Trustblock; the latest is by Hacken, dated 22 Nov 2023. Those reports list no open critical findings.

Critical findings
No open critical findings
Across the 3 reports, 4 critical findings were reported. Each is marked fixed by the firm that reported it. See the findings
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.

Audits3

Newest first

AuditSecurity firmDateScopeCritical findingsReport
VenomBridge / BridgeSecurity firm: HackenDate: Scope: Files named in the report1 critical finding, fixedOpen · hacken.io
VenomStake / LiquidStakingSecurity firm: HackenDate: Scope: Files named in the report2 critical findings, fixedOpen · hacken.io
Web3.World / VestingSecurity firm: HackenDate: Scope: Files named in the report1 critical finding, fixedOpen · hacken.io

Findings163

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical004
High106
Medium10031
Low26085
HighPotential Funds Lock on Close Event in TVM to EVM BridgeVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
MediumInconsistent Native Token Replacement Across EVM and TVM ChainsVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
MediumIncorrect Implementation of Diamonds Storage SlotsVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
MediumOverly Permissive Rescuer RoleVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
MediumPossible Incorrect Hardcoded Values in Token Address Calculation FunctionsVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
MediumPotential Funds Lock on Event Rejection in TVM to EVM BridgeVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
MediumPotential Funds Lock on Token Burn in TVM to EVM BridgeVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
MediumPotential Overpayment in Token Deposit FunctionalityVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
MediumRace Condition due to On-the-Fly Fee CalculationVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
MediumUser Funds Mismanagement in propose() FunctionVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
Show 10 more
MediumInconsistent Gas ManagementWeb3.World / Vesting · Hacken · 29 Aug 2023Open

The report gives no description here.

Open the report
LowAbsence of Descriptive Messages in require() StatementsVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
LowContradictory NamingVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
LowFloating Pragma with Outdated Versions in .sol FilesVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
LowIncorrect Gas Amount Attached to Contract DeploymentVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
LowInvalid Required Gas CalculationVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
LowMissing Encoder for Everscale to Ethereum StakingEventDataVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
LowMissing Events on Critical State UpdatesVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
LowNatSpec Contradiction in setTokenDepositFee() FunctionVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
LowRedundant Code Patterns in StakingRelay, StakingBase, and UserData ContractsVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
Show 10 more
LowRedundant Constant Variables in Multiple ContractsVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
LowRedundant Event DeclarationVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
LowRedundant Functionality in onCodeUpgrade() in ProxyMultiVault ContractsVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
LowTransaction Replay Possibility in constructor()VenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
LowUnsupported ERC20 Tokens with Zero DecimalsVenomBridge / Bridge · Hacken · 22 Nov 2023Open

The report gives no description here.

Open the report
LowFloating PragmaVenomStake / LiquidStaking · Hacken · 26 Sep 2023Open

The report gives no description here.

Open the report
LowIncorrect Gas RecipientVenomStake / LiquidStaking · Hacken · 26 Sep 2023Open

The report gives no description here.

Open the report
LowRedundant Bounce Flag SetVenomStake / LiquidStaking · Hacken · 26 Sep 2023Open

The report gives no description here.

Open the report
LowRedundant Contract DeclarationVenomStake / LiquidStaking · Hacken · 26 Sep 2023Open

The report gives no description here.

Open the report
LowRedundant tvm.accept()VenomStake / LiquidStaking · Hacken · 26 Sep 2023Open

The report gives no description here.

Open the report
Show 7 more
LowCode DuplicationWeb3.World / Vesting · Hacken · 29 Aug 2023Open

The report gives no description here.

Open the report
LowIncorrect File ExtensionWeb3.World / Vesting · Hacken · 29 Aug 2023Open

The report gives no description here.

Open the report
LowMagic Numbers UsageWeb3.World / Vesting · Hacken · 29 Aug 2023Open

The report gives no description here.

Open the report
LowOutdated Compiler VersionWeb3.World / Vesting · Hacken · 29 Aug 2023Open

The report gives no description here.

Open the report
LowRedundanciesWeb3.World / Vesting · Hacken · 29 Aug 2023Open

The report gives no description here.

Open the report
LowRedundant BranchingWeb3.World / Vesting · Hacken · 29 Aug 2023Open

The report gives no description here.

Open the report
LowStyle Guide ViolationWeb3.World / Vesting · Hacken · 29 Aug 2023Open

The report gives no description here.

Open the report

Contracts

No deployed address is recorded for these audits.

The reports name a repository or files. Open a report to see its scope.

The repositories and files the reports name

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
<div
data-tb-project-widget
data-tb-project-slug="venom-foundation"
></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us