All Reports
Download PDF
TokenTable UnlockerV2 EVM
2025-04-25
Critical0
High0
Medium1
Low4
Info4
About the Protocol
EVM token distribution suite with Unlocker, Fee Collector, and Tracker token contracts.
Findings (9)
M-01MediumFixed
Fixed fees allow users to transfer all project tokens from the Unlocker to the protocol owner
Fixed fee mechanism can be exploited to drain project tokens via repeated zero-amount claims.
L-01LowFixed
Tracker token's balanceOf will revert if address owns cancelled actuals
Balance query reverts for users with cancelled allocations.
L-02LowFixed
Tracker token's totalSupply is always incorrect
Total supply calculation does not accurately reflect claimable tokens.
L-03LowFixed
Unauthorized claims allowed when externalDelegateRegistry is not configured
Missing delegate registry allows unauthorized claim delegation.
L-04LowAcknowledged
defaultFee can be huge or insignificant depending on project token's decimals
Default fee amount is not normalized for token decimal differences.
Ready to Secure Your Project?
Let's discuss your project and ensure your security!