XODEX security record
As of 25 Oct 2026, XODEX has 1 audit report on Trustblock, by CertiK, dated 19 May 2023. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
Findings18
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 2 | 1 |
| Medium | 0 | 1 | 2 |
| Low | 7 | 0 | 5 |
HighImproper Update For Router AddressXODEX · CertiK · 19 May 2023Fixed
The `set_New_Router_and_Make_Pair()`, `set_New_Router_Address()`, and `set_New_Pair_Address()` functions allow the contract owner to update either the pair contract or the router contract. Neither `set_New_Router_and_Make_Pair()` nor `set_New_Router_Address()` check if the pair has been created. If the pair has already been created, then calling `set_New_Router_and_Make_Pair()` on the factory contract will cause this function to revert. It would not be possible to update the router to this address with `set_New_Router_and_Make_Pair()` function. In addition, if the `set_New_Pair_Address` contract is set to an invalid pair then this would cause a denial of service when transferring tokens if the `swapTokens` functions is called.
Open the reportMediumIncorrect Usage of EqualityXODEX · CertiK · 19 May 2023Fixed
The process_Tokens allows the `owner` to swap XODEX Tokens for BNB. However, consider the following lines of code within the function. ```solidity if (percent_Of_Tokens_To_Process > 100) { percent_Of_Tokens_To_Process == 100; } ``` The equality symbol `==` is incorrectly called.
Open the reportMediumMissing Bound CheckXODEX · CertiK · 19 May 2023Fixed
The XODEX contract has three functions that enable the contract owner to update certain parameters: set_Number_Of_Transactions_Before_Liquify_Trigger, set_Max_TX_Percent, and set_Max_Wal_Percent. The set_Number_Of_Transactions_Before_Liquify_Trigger function allows the owner to update the maximum number of transactions that can occur before triggering a liquidity swap. The set_Max_TX_Percent function enables the owner to update the maximum percentage of tokens that can be transferred in a single transaction. Finally, the set_Max_Wal_Percent function allows the owner to update the maximum percentage of tokens that can be held by any single wallet.
Open the reportLowLogical issue about `_TotalFee` in `transfer()`XODEX · CertiK · 19 May 2023Fixed
The `_TotalFee` initially equals `_buyFee + _sellFee`. When a user tries to buy or sell tokens, it is assigned to either `_buyFee` or `_sellFee`. However, the `_TotalFee` is not recovered after the buy or sell transaction.
Open the reportLowMissing Zero Address ValidationXODEX · CertiK · 19 May 2023Fixed
Addresses should be checked before assignment or external call to make sure they are not zero addresses. The following functions do not have a zero address check: 1. `Update__Dev_Wallet` 2. `excludeFromFee` 3. `includeInFee` 4. `set_New_Router_and_Make_Pair` 5. `set_New_Router_Address` 6. `set_New_Pair_Address` 7. `recover_Tokens` 8. `process_Tokens`
Open the reportLowReordering Zero CheckXODEX · CertiK · 19 May 2023Fixed
The `_transfer` includes the following logical statement: ```solidity require(from != address(0) && to != address(0), "ERR: Using 0 address!"); require(amount > 0, "Token value must be higher than zero."); ``` Moving the zero address check and zero transfer check to the beginning of the `_transfer` function can save gas by quickly eliminating obvious cases.
Open the reportLowState Variable Should Be Declared ConstantXODEX · CertiK · 19 May 2023Fixed
The following state variables are never updated within the contract: 1. `_name` 2. `_symbol` 3. `_decimals` 4. `_tTotal` 5. `Burn_Wallet` 6. `maxFee` Variables that that never change should be declared as `constant` to save gas.
Open the reportLowUnused State VariableXODEX · CertiK · 19 May 2023Fixed
The variable `_prevMaxToken` and the variable `_prevMaxTxAmount` are never used in within the `XODEX` contract.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="xodex"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us