Luxxcoin — Backend

Audit report published Nov 2025. Backend service.

Findings at a glance

Severity	Count
Critical	1
Total	1

Summary

Safe Edges reviewed the Luxxcoin backend (the src directory of the Luxx-Backend repository) in November 2025. One Critical issue was identified: the admin authentication middleware verified signatures against a public key supplied by the caller instead of the configured governance key, so anyone could sign their own requests and reach admin endpoints such as round processing, scoring configuration and payouts. The report was issued while remediation was under review, so no resolution status was recorded.

Read the full report (PDF).

Findings

Critical (1)

• C-01 Authentication Bypass via User-Controlled Public Key in Ed25519Auth

More published reports

Related services

Get a fixed quote in 24 hours

Send the repository and a commit hash through the contact form, message @bugtester25 on Telegram, or book a 30-minute scoping call. 200+ protocols audited · $4B+ secured · 0 hacks post-audit. Prefer email? info@safeedges.in.