Audit report published Jul 2025. Fuel · Sway.
| Severity | Count |
|---|---|
| High | 1 |
| Medium | 1 |
| Low | 3 |
| Informational | 1 |
| Total | 6 |
Safe Edges reviewed Stork's Sway oracle contracts on Fuel between 26 June and 4 July 2025. Six issues were identified: one High, one Medium, three Low and one Informational. The High issue let subscribers pay update fees with any token, including worthless ones they create themselves. Stork fixed the High and all three Low issues, and acknowledged the Medium and Informational issues, with its comments recorded in this report.
H-01 Tokens Sent to the Contract Are Not Checked, Allowing the utilization of Worthless Tokens to Pay for Updates — ResolvedM-01 Fees are never refunded if unspent — AcknowledgedL-01 No Way to Update or Revoke Contract Ownership — ResolvedL-02 Incomplete Handling of match Statements — ResolvedL-03 Signature Malleability and Replay Risk — ResolvedI-01 Front-running initialization — AcknowledgedSend the repository and a commit hash through the contact form, message @bugtester25 on Telegram, or book a 30-minute scoping call. 200+ protocols audited · $4B+ secured · 0 hacks post-audit. Prefer email? info@safeedges.in.