Rig Labs — Token Airdrop

Audit report published Nov 2025. Fuel · Sway.

Findings at a glance

Severity	Count
High	2
Low	1
Total	3

Summary

Safe Edges reviewed the Moor token airdrop contract on Fuel, written in Sway, in November 2025. Three issues were identified: two High and one Low. The High issues were claims that sent tokens to the caller instead of the named recipient, and deadline checks that compared a UNIX timestamp with Fuel's TAI64 block timestamp. The report was issued while remediation was under review, so no resolution status was recorded.

Read the full report (PDF).

Findings

High (2)

• H-01 Incorrect Token Recipient in claim Function
• H-02 Incorrect Deadline Validation Using Mismatched Timestamp Formats

Low (1)

• L-01 Missing total_allocation Enforcement For Token Distribution in claim Function

More published reports

Related services

Get a fixed quote in 24 hours

Send the repository and a commit hash through the contact form, message @bugtester25 on Telegram, or book a 30-minute scoping call. 200+ protocols audited · $4B+ secured · 0 hacks post-audit. Prefer email? info@safeedges.in.