VIDT DAO security record
As of 3 Nov 2026, VIDT DAO has 1 audit report on Trustblock, by CertiK, dated 27 Sep 2022. That report lists no open critical findings.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
Findings14
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 3 | 0 | 0 |
| Medium | 0 | 1 | 1 |
| Low | 2 | 0 | 7 |
MediumThe same hash can validate twiceVIDT DAO · CertiK · 27 Sep 2022Fixed
According to the logic, the index of `fileHashes` starts from 0, but the logic for detecting the presence of a hash is based on whether the index is 0 or not. This will result in the first hash being able to be verified twice.
Open the reportLowLack of Input ValidationVIDT DAO · CertiK · 27 Sep 2022Fixed
The parameter `Data` is not validated, however it's checked in the function `validateFile()`.
Open the reportLowLoop OptimizationVIDT DAO · CertiK · 27 Sep 2022Fixed
In the function `verifyFile()`, the loop that checks for byte inequality would be more efficient if it aborted the loop as soon as it found a match.
Open the reportLowMissing Emit EventsVIDT DAO · CertiK · 27 Sep 2022Fixed
The function `simpleValidateFile()` emits the event `Transfer`, but the function `covertValidateFile()` does not.
Open the reportLowRedundant CodeVIDT DAO · CertiK · 27 Sep 2022Fixed
The function `increaseAllowance()` has the same implementation logic as the function `increaseApproval()`, the function `decreaseAllowance()` has the same issue.
Open the reportLowRedundant Modifier `payable`VIDT DAO · CertiK · 27 Sep 2022Fixed
The function that is declared `payable` can receive ether. The function `simpleValidateFile()` seems not designed for receiving ether, so it is redundant to have the `payable` modifier.
Open the reportLowUsage of `transfer()` for sending EtherVIDT DAO · CertiK · 27 Sep 2022Fixed
After [EIP-1884](https://eips.ethereum.org/EIPS/eip-1884) was included in the Istanbul hard fork, it is not recommended to use `.transfer()` or `.send()` for transferring ether as these functions have a hard-coded value for gas costs making them obsolete as they are forwarding a fixed amount of gas, specifically `2300`. This can cause issues in case the linked statements are meant to be able to transfer funds to other contracts instead of EOAs.
Open the reportLowVariables That Could Be Declared as `constant`VIDT DAO · CertiK · 27 Sep 2022Fixed
The linked variables could be declared as `constant` since these state variables are never modified.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="vidt-dao"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us