All Reports
Download PDF
TokenTable Merkle Distributor
2025-04-28
Critical0
High0
Medium1
Low1
Info2
About the Protocol
EVM merkle-proof-based token distribution contracts supporting ERC-20 and NFT claims.
Findings (4)
M-01MediumFixed
Incorrect Withdrawal Implementation May Lead to Lock of Unclaimed NFTs
Withdrawal logic may permanently lock unclaimed NFTs in the contract.
L-01LowFixed
Upgrade Permission for the Protocol Assigned to the Project Owner
Upgrade authority incorrectly assigned to the project owner.
I-01InfoAcknowledged
NFT Fee Handling is Incompatible with BIPS Type of Fees
NFT distribution fees cannot work with basis-point fee model.
I-02InfoAcknowledged
getClaimDelegate Function Not Blocked When Delegated Claiming is Disabled
Delegate query function remains accessible when delegation is disabled.
Ready to Secure Your Project?
Let's discuss your project and ensure your security!