Protocol Public report
NEAR / Defuse Labs
NEAR Intents Security Review
Selected public finding Medium
Potential Funds Stealing From Users Via Repeating Failed Intents
- NEAR
- Intents
- Protocol
Work & reports
Published security reviews you can inspect.
Every review we are permitted to publish, in full. Most lead with a critical or high severity finding.
View reports on GitHubEach card shows one highlighted finding, not the full result. Open the report for every finding and its severity.
Pull request Public report
NEAR / Defuse Labs
NEAR Intents Passkeys Pull Request Security Review
Selected public finding Medium
Potential DoS of The Main Functionality Through Malicious Solvers
- NEAR
- Passkeys
- Protocol
Smart contract Public report
Sailor Lend
NEAR Smart Contract Security Review
Selected public finding Critical
Race Condition in Borrow Functionality
- NEAR
- Smart contract
- Rust
Web application Public report
Sailor Lend
Web Application Security Review
Selected public finding Critical
Vulnerable to React2Shell
- Web
- Application
- Security review
Smart contract Public report
Spin Finance
Onchain Orderbook and Perpetual Trading Security Review
Selected public finding Critical
Order Placement with Negative/Zero Margin Ratio Is Possible
- NEAR
- Smart contract
- Rust
Smart contract Public report
Sweat Economy
SWEAT NEP-141 Token Security Review
Selected public finding High
LookupMap adapter can undercharge storage for selected accounts
- NEAR
- Smart contract
- Rust
Smart contract Public report
Sweat Economy
Sweat Jars Migration & Refactor Smart Contract Review
Selected public finding Medium
Possible Double Claim Through Race Condition
- NEAR
- Smart contract
- Rust
Smart contract Public report
Sweat Economy
Tiered Jars & Boosters Smart Contract Security Review
Selected public finding Low
Possible overflows
- NEAR
- Smart contract
- Rust
Smart contract Public report
Sweat Economy
Sweat Booster & Step Jars Security Review
Selected public finding Critical
Missing Access Control On NFT Transfer Resolver
- NEAR
- Smart contract
- Rust
Smart contract Public report
Sweat Economy
Jars Refactor Security Review
Selected public finding High
Potential DoS of Batch Operations
- NEAR
- Smart contract
- Rust
Smart contract Public report
Sweat Economy
Burn Model Changes Security Review
Selected public finding Low
Error Prone Burn Rate Calculation
- NEAR
- Smart contract
- Rust
Smart contract Public report
Sweat Economy
Defer Feature Security Review
Selected public finding Low
Race Condition Lock Is Not Asserted
- NEAR
- Smart contract
- Rust
Smart contract Public report
Templar
Single Chain Smart Contracts Security Review
Selected public finding High
Supply Withdrawal Mechanism DoS
- NEAR
- Smart contract
- Rust
Smart contract Public report
Cleopetra
Solana Trading Bot Security Review
Selected public finding Medium
Incorrect Use of Async in Reward Distribution
- Solana
- Smart contract
- TypeScript
Substrate Layer-1 Public report
Enjin
Relaychain and Matrixchain Security Review
Selected finding Critical
DoS of Fuel Tank Mutation
- Polkadot
- Substrate
- Rust
Substrate pallet Public report
Enjin
Claims Pallet Security Review
Selected finding Critical
DoS of Claiming Functionality
- Polkadot
- Substrate pallet
- Rust
Substrate pallet Public report
Virto Network
Pallet Pass Security Review
Selected public finding High
DoS of The Main Functionality Through Session Key Hijacking
- Polkadot
- Substrate pallet
- Rust
Smart contract Public report
Ample Protocol
IP and Media Protocol Security Review
Selected public finding Critical
Anyone Can Update The NFT Holder In Treasury
- NEAR
- Smart contract
- Rust
Smart contract Public report
DefiShards
Decentralized Investment Platform Security Review
Selected public finding Critical
Irrecoverable Denial-of-Service Condition In Vault Contract
- NEAR
- Smart contract
- Rust
Smart contract Public report
Potlock
Portal for Public Goods and Funding Security Review
Selected public finding Critical
DoS of Process Payouts
- NEAR
- Smart contract
- Rust
Smart contract Public report
Jump DeFi
Smart Router and Farm Security Review
Selected public finding Critical
Token Draining Through Invalid Callback Handling
- NEAR
- Smart contract
- Rust
Off-chain Public report
Jump DeFi
Backend & Frontend Security Assessment
Selected public finding Critical
Indexer Crash Due to Invalid UTF-8 Character
- NEAR
- Off-chain
- Rust & TypeScript
Off-chain Public report
Neko / Trove Labs
Airdrop Script Security Review
Selected public finding Medium
Lack of Error Handling in Airdrop Script
- NEAR
- Off-chain
- TypeScript