Venom Foundation security record
As of 25 Oct 2026, Venom Foundation has 3 audit reports by 1 security firm on Trustblock; the latest is by Hacken, dated 22 Nov 2023. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits3
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| VenomBridge / Bridge | Security firm: Hacken | Date: | Scope: Files named in the report | 1 critical finding, fixed | Open · hacken.io |
| VenomStake / LiquidStaking | Security firm: Hacken | Date: | Scope: Files named in the report | 2 critical findings, fixed | Open · hacken.io |
| Web3.World / Vesting | Security firm: Hacken | Date: | Scope: Files named in the report | 1 critical finding, fixed | Open · hacken.io |
Findings163
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 4 |
| High | 1 | 0 | 6 |
| Medium | 10 | 0 | 31 |
| Low | 26 | 0 | 85 |
CriticalShare Inflation and Front-Running in MultiVault ContractsVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportCriticalTransaction Replay AttackVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportCriticalTransaction Replay AttackVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportCriticalTransaction Replay AttackWeb3.World / Vesting · Hacken · 29 Aug 2023Fixed
The report gives no description here.
Open the reportHighFunds Loss Due To Initialization Front RunVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportHighInvalid Fee Beneficiary Handling for Zero LiquidityVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportHighData ConsistencyVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportHighIncorrect Function UsedVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportHighIncorrect Gas ManagementVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportHighLack of ValidationVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportShow 10 more
MediumCentralization Risk Due to Owner's Access to User Funds in ProxyMultiVaultAlien ContractVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportMediumFunds Lock Due To Initialization Front Run PrepaidVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportMediumHigh Permissions May Lead to Data InconsistencyVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportMediumIncorrect Alien Token Value Passed in the _callbackAlienWithdrawal() FunctionVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportMediumIncorrect Funds Receiver On Early Event DestructionVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportMediumInefficient Gas Management in EthereumEverscaleEventConfiguration ContractVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportMediumMismanagement of fee-on-transfer Tokens in Deposit FacetVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportMediumMismanagement of fee-on-transfer Tokens in Liquidity FacetVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportMediumMissing Validation for Wrapped Native Asset in UnwrapNativeToken ContractVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportMediumOutdated OpenZeppelin Contracts UsedVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportShow 10 more
MediumOwnership IrrevocabilityVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportMediumPotential Funds Lock on Event Rejection in EVM to TVM BridgeVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportMediumPotential WETH Address ManipulationVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportMediumSignature Malleability Due to Outdated ECDSA LibraryVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportMediumTransaction Replay Possibility in close() FunctionVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportMediumTransaction Replay Possibility in deployEvents() FunctionVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportMediumTransaction Replay Possibility in queue() FunctionVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportMediumUnrestricted Access to deploy() Function in StakingRootDeployer.tsol ContractVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportMediumDenial of ServiceVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportMediumDivision By ZeroVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportShow 10 more
MediumImplementation ErrorVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportMediumInconsistent Ownership ControlVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportMediumIncorrect Gas ManagementVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportMediumIncorrect Gas ManagementVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportMediumInvalid ValidationVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportMediumInvalid ValidationVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportMediumMissing ValidationVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportMediumMissing ValidationVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportMediumMissing ValidationVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportMediumMissing ValidationVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportShow 10 more
MediumRace ConditionVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowCEI Violation With Event EmissionVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowCommented-out Code in ProxyMultiVaultAlien_V7.tsol ContractVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowContract Name ReuseVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowContradictory Documentation on Event Confirmation and RejectionVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowDocumentation Mismatch Regarding Function Access in Multiple FunctionsVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowDocumentation Mismatch Regarding Native vs. Alien Tokens in ProxyMultiVaultNative_V5_Deposit.tsolVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowFloating Pragma in .tsol FilesVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowHardcoded Values and Magic Numbers in StakingBase.tsol Contract Initialization of RelayConfigDetailsVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowInaccurate Comment on Relay Membership Lock Time in UserData.tsolVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowIncorrect int Type Size Used in EverscaleAddress StructVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowIncorrect Interface Version UsedVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowIncorrect Remaining Gas Receiver Of TokenRootAlienEVM Deployment Funded By Contract ItselfVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowInefficient Event Emission in MultiVault Facet SettingsVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowInefficient Token Existence Check in Bulk OperationsVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowInvalid Balance Sanity Check in withdrawTonsEmergency() FunctionVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowMissing cashBack Modifier in Various FunctionsVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowMissing Function Declarations in Interfaces IDAO.sol and IBridge.solVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowMissing Revert Error Codes in require() StatementsVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowMissing Storage GapsVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowMissing Validation in _getNativeWithdrawalToken() FunctionVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowMissing Validation in DaoRoot.tsolVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowMissing Visibility ModifiersVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowMissing Zero Address CheckVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowMissing Zero Address Checks in Bridge.tsolVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowMissing Zero Address Checks in DaoRoot.tsolVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowMissing Zero Address ValidationVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowMissing Zero Address Validation in StakingBase.tsolVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowName Contradiction In MultiVaultStorage ContractVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowNot Explicit Interface UsageVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowPossible Not Implemented Emergency Shutdown Functionality in Bridge.solVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowPotential Underflow in _deposit() FunctionVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowPresence of Unused Test Contracts in Production CodebaseVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowRedundant Check in saveWithdrawNative() FunctionVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowRedundant Code in DiamondProxy Storage FunctionsVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowRedundant Code Pattern in removeToken() FunctionVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowRedundant Function Addition Logic in DiamondProxy Storage FunctionsVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowRedundant FunctionsVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowRedundant Import StatementsVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowRedundant Inheritance of MultiVaultHelperEverscale in MultiVaultFacetFees ContractVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowRedundant Modifier in Delegate ContractVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowRedundant State Update in BaseEventVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowRedundant Usage of Experimental ABI Encoder in Solidity ^0.8.0VenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowRedundant Zero-Check Logic in MultiVault Token Fee Increase FunctionVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowSolidity Style Guides ViolationVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowTest-only Contract Not In Mock/Test FolderVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowTODO Comments in Production CodeVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowUnlimited Event Size Allows Relayer To Burn Service Contract BalanceVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowUnused ModifiersVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportLowWrapping Address to Contract Implementation Instead of InterfaceVenomBridge / Bridge · Hacken · 22 Nov 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowCode ConsistencyVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowCode ConsistencyVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowDuplicate Field in Return ObjectVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowFunds LockVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowIncorrect Gas ManagementVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowIncorrect Gas ManagementVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowIncorrect Gas ManagementVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowIncorrect Gas ManagementVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowIncorrect Gas ManagementVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowIncorrect Gas ManagementVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowMagic Numbers UsageVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowMagic Numbers UsageVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowMissing Error CodeVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowMissing NatSpecVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowMissing ValidationVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowMissing ValidationVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowMissing ValidationVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowOutdated Compiler VersionVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowPotential UnderflowVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowPotential UnderflowVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowRedundant Code BlockVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowRedundant Constant VariableVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowRedundant Event DeclarationVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowRedundant Function DeclarationVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowRedundant ImportsVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowRedundant ModifierVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowRedundant State Change and Event EmissionVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowRedundant Use Of ModifierVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowStorage Variable ShadowingVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowStyle Guide ViolationVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportShow 6 more
LowTesting Functions in Production InterfaceVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowTODO CommentVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowTypographical ErrorVenomStake / LiquidStaking · Hacken · 26 Sep 2023Fixed
The report gives no description here.
Open the reportLowFloating PragmaWeb3.World / Vesting · Hacken · 29 Aug 2023Fixed
The report gives no description here.
Open the reportLowImplicit Call FlagWeb3.World / Vesting · Hacken · 29 Aug 2023Fixed
The report gives no description here.
Open the reportLowRedundanciesWeb3.World / Vesting · Hacken · 29 Aug 2023Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="venom-foundation"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us