| Severity | Tool | Title | Validated | Confirmed |
|---|---|---|---|---|
| high | detector | Authorization based on tx.origin | no | — |
| medium | detector | ETH value transfer possible | no | no |
| medium | detector | Untrusted CALL target/value reachable | no | no |
| medium | codex | Mint signatures are not bound to a trusted signer (anyone can self‑authorize) | no | — |
| low | codex | Signatures are replayable across contracts/chains (no domain separation or nonce) | no | — |
| Run ID | Status | Validated | Total findings | Created |
|---|---|---|---|---|
| 019c0ea9-0968-7020-87be-641769d60ed2 | failed | crit 0 high 0 | 5 | 2 months ago |
| 019b477e-bda1-725a-bc30-a2835c5f9a0e | complete | crit 0 high 0 | 3 | 3 months ago |
| 019b3844-9919-732f-9cf8-fc7964aa8f32 | complete | crit 0 high 0 | 3 | 3 months ago |