SECURITY REVIEWS · SBSECURITY

Audited by SBSecurity.
Zero open findings.

SBSecurity has manually reviewed the three HoodLock contracts that hold user funds: the token locker, the vesting contract and the Liquidity Locker. Open a report below to read every page, or download the original PDF, unchanged.

2
REPORTS
0
HIGH SEVERITY
6 / 6
FINDINGS FIXED
3
CONTRACTS IN SCOPE
SEPTEMBER 2026 · 9 PAGES
Token Locker and Vesting
RobinhoodLocker.sol and RobinhoodVesting.sol
0 findings0 high severityAudited 16.09.2026
AUDIT PASSED
0
TOTAL FINDINGS
0
HIGH SEVERITY
2
CONTRACTS IN SCOPE
16.09.2026
END OF AUDIT
Open the original PDF Locker on the explorer Vesting on the explorer
What the review covers. The locker (RobinhoodLocker.sol) and the vesting contract (RobinhoodVesting.sol). Both are live and non-upgradeable, so the reviewed source is the code that runs. The report found nothing to fix.

The report

All nine pages, exactly as SBSecurity delivered them.
Security review, page 1
About, disclaimer and risk classification, page 2
Executive summary and key findings, page 3
Project summary and security posture, page 4
Recommendations, page 5
Contracts and roles, page 6
Privileged roles, page 7
Findings summary, page 8
Audit complete, page 9
OCTOBER 2026 · 16 PAGES
Liquidity Locker (Uniswap V3 and V4)
HoodLockLPLocker.sol
6 of 6 fixed0 high severityAudited 04.10.2026
AUDIT PASSED
6
TOTAL FINDINGS
6 / 6
FIXED AND VERIFIED
0
HIGH SEVERITY
04.10.2026
END OF AUDIT
Open the original PDF Liquidity Locker on the explorer
What the review covers. The Liquidity Locker (HoodLockLPLocker.sol), which holds Uniswap V3 and V4 position NFTs until their unlock date. Every finding was fixed, and SBSecurity verified the fixes before launch. No finding put locked positions at risk. The live contract's source is verified on the explorer, linked above, so anyone can read the code that runs.

Findings

Six findings, all fixed before launch.
IDFindingSeverityStatus
M-01Lock owners can avoid the collect feeMEDIUMFIXED
M-02Fees cannot be collected from v4 pools whose hook takes a cut on removalMEDIUMFIXED
L-01adminCollect requires the full admin keyLOWFIXED
L-02_tryTransfer can revert instead of returning falseLOWFIXED
L-03Owed ETH is stuck if the recipient cannot receive ETHLOWFIXED
I-01isUnlocked returns true for non-existent locksINFOFIXED

The report

All sixteen pages, exactly as SBSecurity delivered them.
Security review cover, page 1
About, disclaimer and risk classification, page 2
Executive summary and key findings, page 3
Project summary and security posture, page 4
Recommendations, page 5
Contracts and roles, page 6
Privileged roles, page 7
Findings summary, page 8
M-01, lock owners can avoid the collect fee, page 9
M-02, v4 pools whose hook takes a cut on removal, page 10
M-02, continued, page 11
L-01, adminCollect requires the full admin key, page 12
L-02, _tryTransfer can revert instead of returning false, page 13
L-03, owed ETH is stuck if the recipient cannot receive ETH, page 14
I-01, isUnlocked returns true for non-existent locks, page 15
Audit complete, page 16