SecurityLab / Reports / ETH🔍 CrossChainVault
📍 0x799dB7C9D74e0BE6E35D8C5558d4714024a66e69 · 🌐 ETH · 🤖 engine: heuristic
💰 Balance: 0.0 · 📈 Tx: 0
CRITICAL 8
HIGH 1
MEDIUM 9
LOW 9
Findings preview
CRITICAL Reentrancy with ETH withdrawal (repeated entry)
CRITICAL Reentrancy with ETH withdrawal (repeated entry)
CRITICAL Reentrancy with ETH withdrawal (repeated entry)
CRITICAL Reentrancy with ETH withdrawal (repeated entry)
CRITICAL Reentrancy with ETH withdrawal (repeated entry)
CRITICAL Reentrancy with ETH withdrawal (repeated entry)
CRITICAL Reentrancy with ETH withdrawal (repeated entry)
CRITICAL Reentrancy with ETH withdrawal (repeated entry)
HIGH Transfer logic flaw (custom hook / fee-on-transfer desync)
MEDIUM unchecked block — arithmetic without overflow protection
MEDIUM unchecked block — arithmetic without overflow protection
MEDIUM unchecked block — arithmetic without overflow protection
MEDIUM unchecked block — arithmetic without overflow protection
MEDIUM unchecked block — arithmetic without overflow protection
MEDIUM unchecked block — arithmetic without overflow protection
MEDIUM unchecked block — arithmetic without overflow protection
MEDIUM unchecked block — arithmetic without overflow protection
MEDIUM Classic ERC20 approve without increase/decreaseAllowance
LOW Floating compiler version (^ or >=)
LOW Logic depends on block.timestamp
LOW Logic depends on block.timestamp
LOW Logic depends on block.timestamp
LOW Logic depends on block.timestamp
LOW Logic depends on block.timestamp
LOW Logic depends on block.timestamp
LOW Logic depends on block.timestamp
LOW Logic depends on block.timestamp
INFORMATIONAL Governance takeover via token purchase (dormant DAO)
INFORMATIONAL Signature replay (missing nonce/cleanup)
INFORMATIONAL Flash loan amplified attack
Preview only — no exploit details or fix recommendations are published here
to avoid disclosing an unpatched issue before the contract owner sees it. Full report (RU+EN), exact lines,
exploit path and fork PoC — via the bot below.
📩 Get full report via Telegram
View contract on block explorer →
⚠️ Think this finding is wrong?
If you're the contract owner and believe this automated finding is inaccurate,
or want this page reviewed or removed, send us your contact details and we'll get back to you.
Enable JavaScript to use this form, or message @mkoldaev on Telegram.