MantleMainnetHyperVaultExtended_Suite__5_contracts_

Mantle Mainnet · scan depth full-report · generated 6/16/2026, 5:17:39 PM

Risk Score

100

Archon completed a read-only Mantle Mainnet audit of MantleMainnetHyperVaultExtended_Suite__5_contracts_ and found 192 deterministic findings. The highest-priority issue is Weak Prng, with risk score 100/100 based on severity-weighted findings. The `claimWeakRandomReward` function derives randomness solely from on-chain, predictable values (block.timestamp, block.prevrandao, block.number, msg.sender, tx.origin, contract token balance). An attacker can compute the same hash in advance or within the same block, then call the function to claim rewards at a favorable `maxAmount` threshold deterministically. Review the recommended fixes and run regression tests before deployment.

Models used: Tencent Cloud TokenHub (deepseek-v4-pro) — AI reasoning served on Tencent Cloud TokenHub.

Findings

low: 67high: 20info: 78medium: 27critical: 0

Public validation

Challenge ledger

Anyone can challenge this artifact. Archon records the challenge in the database with a deterministic hash and references any existing report proof tx/hash. No new validation contract is implied.

No challenges recorded yet.

Proof Verification

Stored report hash

0x0801054aaf6caa62ef56d972bf5d357de3417a09b184635605a91b1d3fca6dde

Re-derived hash

0x0801054aaf6caa62ef56d972bf5d357de3417a09b184635605a91b1d3fca6dde

Metadata URI

ipfs://QmbibjFruNbLRkR1eKUfAMfA7mz4UK1TWbYwq7gqmoEFAz

Result

Hash match + ERC-8004 on-chain attestation present

Mantlescan

ERC-8004 Reference

{
  "author": "0xBd88eAE165F8A00B1B33357Fb0880CD4fE5C5E70",
  "agentId": "97",
  "contract": "0xe7043e2ec95eF357FbBa3359BA2f1edb10cEAD2a",
  "loggedBy": "0xBd88eAE165F8A00B1B33357Fb0880CD4fE5C5E70",
  "mechanism": "archon-proof-registry",
  "reputation": {
    "tag2": "risk:100",
    "txHash": "0xf9ca5048b14c7edf90c68f6b0ee54d201f5e65fdf7612a7ee031e5c8c1b0dd40",
    "agentId": "97",
    "feedbackIndex": "11",
    "feedbackClient": "0x8cd94bc5Ce29ECDA7feDbc14D264873835284D79",
    "reputationRegistry": "0x8004BAa17C55a88189AE136b182e5fdA19dE9b63"
  }
}

Careful scope

Archon reports are risk intelligence with confidence scores and recommended fixes. They are not guarantees, certifications, or claims that a contract is safe.

Severity	Finding	Location	Confidence
high	Weak Prng The `claimWeakRandomReward` function derives randomness solely from on-chain, predictable values (block.timestamp, block.prevrandao, block.number, msg.sender, tx.origin, contract token balance). An attacker can compute the same hash in advance or within the same block, then call the function to claim rewards at a favorable `maxAmount` threshold deterministically.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:1247	92%
high	Controlled Delegatecall `ownerDelegateCall` allows the owner to delegatecall any target with arbitrary calldata. Because delegatecall executes code in the context of the calling contract, a malicious or compromised owner can alter storage (e.g., upgrade logic, drain tokens, change critical parameters) without any timelock or multi-sig protection.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:1195	97%
high	Encode Packed Collision The function `consumeCrossChainMessage` uses `abi.encodePacked` to compute the message hash, which can lead to collisions when the dynamic types `sourceChain`, `sourceSender`, `payload`, and `arbitraryData` are packed together. Different combinations of input values may produce the same keccak256 hash, allowing an attacker to replay or impersonate cross-chain messages by crafting inputs that collide with a previously consumed message hash.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:1210	90%
high	Reentrancy Balance The `flashLoan` function performs an external call to `IFlashBorrower(receiver).onFlashLoan(...)` after transferring tokens to the receiver but before verifying the return value and updating state. This breaks the checks-effects-interactions pattern and may allow reentrancy if the receiver's callback re-enters the contract, potentially manipulating the `balanceBefore` or other state variables that are read after the callback.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:833	85%
high	Unchecked Transfer In claimReward, the return value of IERC20Like(p.token).transfer(msg.sender, reward) is not checked. If the token transfer fails silently (e.g., non-standard ERC20 that returns false instead of reverting), the contract would proceed to update the position's rewardDebt and lastClaimAt, and emit a RewardClaimed event, effectively losing the reward while updating state as if the transfer succeeded.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:554	90%
high	Unchecked Transfer In fillOrder, the transfer of o.sellToken to the filler (msg.sender) and the transferFrom of o.buyToken from the filler to the maker are performed without checking the return values. If either transfer silently fails, the order could be incorrectly marked as filled while tokens may not have moved as intended, leading to loss of assets or a double-spend scenario.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:893	90%
high	Unchecked Transfer The `deposit` function uses an unchecked `transferFrom` call to pull tokens from the user. The return value of the external call is ignored, which breaks accounting when interacting with fee-on-transfer or non-standard ERC-20 tokens. The contract credits the user with the full `amount` parameter while only receiving `amount - fee` tokens, leading to an inflation of deposits and potential exploit of withdrawable balances.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:486	95%
high	Unchecked Transfer The `openLoan` function transfers collateral from the user to the contract without checking the return value of the `transferFrom` call. If the collateral token is a fee-on-transfer (or rebasing) token, the contract receives less than the specified `collateralAmount` but may still account for the full amount, leading to over-collateralization or under-collateralization mismatches and potential protocol manipulation.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:653	95%
high	Unchecked Transfer The `withdrawWithExternalHook` function calls an external hook contract before updating the user's position state. Even non-allowlisted hooks are invoked. This violates the checks-effects-interactions pattern and can lead to reentrancy, allowing an attacker to drain funds or manipulate state.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:598	90%
high	Unchecked Transfer The `flashLoan` function performs an external callback to the `receiver` contract after transferring tokens, without updating any state. If the callback re-enters, it could exploit the contract's logic, potentially draining funds or manipulating market parameters.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:833	95%
high	Unchecked Transfer The liquidate function does not verify the return value of token transfers. If a transfer returns false but does not revert, the contract may silently fail to transfer collateral or repay debt, leading to inconsistent state.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:757	90%
high	Unchecked Transfer The cancelOrder function does not check the return value of IERC20Like(o.sellToken).transfer. If the transfer fails silently, the maker's tokens may remain in the contract with the order marked as cancelled.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:908	85%
high	Unchecked Transfer The `createOrder` function performs an ERC20 transfer using `transferFrom`, but it does not check the boolean return value. Some non-standard ERC20 tokens (e.g., USDT) return false on failure instead of reverting, which would allow execution to continue despite a failed transfer. Additionally, the `sellToken` address is user-supplied and could be a malicious or problematic token implementation.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:856	90%
high	Unchecked Transfer The `emergencySweep` function uses `transfer` without checking the return value. If the token fails (e.g., due to pausing, blacklisting, or insufficient funds), the transaction will still succeed, and the event will be emitted. This gives a false sense of successful asset recovery or could be exploited by a guardian/owner to mislead monitoring systems.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:1295	90%
high	Unchecked Transfer The function `claimRewardByOriginSignature` uses `IERC20Like(token).transfer(tx.origin, amount)` without checking the return value. The `transfer` function of the IERC20 interface returns a boolean indicating success or failure, but this return value is ignored. If the transfer fails silently (e.g., due to insufficient balance, paused token, or token that returns false instead of reverting), the function will not revert, leading to a state where the reward is considered claimed but the tokens were never actually transferred to the recipient. This can result in loss of funds or broken accounting.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:1044	98%
high	Unchecked Transfer In the `repay` function, `IERC20Like(l.debtToken).transferFrom(msg.sender, address(this), amount)` is called without checking its return value. The repayment amount is then used to update the loan's debt amount and potentially refund collateral. If the `transferFrom` fails silently (e.g., due to insufficient allowance, fee‑on‑transfer token that returns false on failure, or a non‑compliant ERC‑20), the loan state will be incorrectly updated—marking the loan as closed or reducing the debt—without the contract having actually received the tokens. This leads to a loss of funds for the protocol and allows borrowers to unfairly close loans.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:723	98%
high	Unchecked Transfer Unchecked Transfer was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:1247-1268. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:1247	86%
high	Unchecked Transfer Unchecked Transfer was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:1282-1289. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:1282	86%
high	Unchecked Transfer Unchecked Transfer was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:575-592. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:575	86%
medium	Incorrect Equality Incorrect Equality was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:466-480. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:466	74%
medium	Reentrancy No Eth Reentrancy No Eth was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:575-592. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:575	74%
medium	Reentrancy No Eth Reentrancy No Eth was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:598-623. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:598	74%
medium	Reentrancy No Eth Reentrancy No Eth was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:723-751. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:723	74%
medium	Reentrancy No Eth Reentrancy No Eth was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:893-906. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:893	74%
medium	Reentrancy No Eth Reentrancy No Eth was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:486-538. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:486	74%
medium	Reentrancy No Eth Reentrancy No Eth was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:757-789. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:757	74%
medium	Reentrancy No Eth Reentrancy No Eth was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:653-703. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:653	74%
medium	Reentrancy No Eth Reentrancy No Eth was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:833-850. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:833	74%
medium	Reentrancy No Eth Reentrancy No Eth was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:554-569. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:554	74%
medium	Tx Origin Tx Origin was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:372-375. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:372	74%
medium	Tx Origin Tx Origin was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:1282-1289. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:1282	74%
medium	Unchecked Lowlevel Unchecked Lowlevel was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:1210-1233. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:1210	74%
medium	Unchecked Lowlevel Unchecked Lowlevel was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:598-623. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:598	74%
medium	Unused Return Unused Return was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:811-822. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:811	74%
medium	Unused Return Unused Return was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:598-623. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:598	74%
low	Events Access Events Access was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:331-333. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:331	74%
low	Events Access Events Access was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:391-393. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:391	74%
low	Events Maths Events Maths was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:359-361. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:359	74%
low	Events Maths Events Maths was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:355-357. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:355	74%
low	Events Maths Events Maths was detected from deterministic analysis at MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:351-353. The issue should be reviewed because it can affect contract correctness, user balances, or operational cost depending on how the function is used.	MantleMainnetHyperVaultExtended_Suite__5_contracts_.sol:351	74%