All audits

Web3 · Smart Contract Audit

ApeCoin

softstack completed a smart contract audit of ApeCoin's APE FOUNDATION APE Token in March 2022 and reported no security findings. The full report is published in the softstack public audit archive.

Key facts

Client
ApeCoin
Completed
Type
Smart Contract Audit
Chains
Ethereum
Languages
Solidity
Market cap
$150M as of 2026-10-27

About the project

ApeCoin is an ERC-20 governance and utility token tied to the Bored Ape Yacht Club and Otherside ecosystems. It serves as the native gas token of ApeChain and also circulates on Ethereum and several other networks. The token funds community-led initiatives across culture, gaming and commerce, and decisions are made through ApeCoin DAO.

Scope

Components reviewed

2 modules · 2 files
  1. contracts/SimpleToken.sol
  2. SimpleToken.sol

Findings

0Critical
0High
0Medium
0Low
0Informational

Methodology

Review process

  1. Scoping and threat modelling

    The commit hash is frozen and the attack surface is mapped: asset flows, trust assumptions, privileged roles and the external systems the code depends on.

  2. Automated analysis

    Static analysers sweep the full codebase to surface known weakness patterns, unreachable states and deviations from established conventions.

  3. Manual code review

    Independent engineers read the code line by line, concentrating on business logic, access control, arithmetic and the handling of external calls.

  4. Adversarial testing

    Property-based fuzzing and invariant tests attack the assumptions the protocol relies on, targeting states that ordinary unit tests never reach.

  5. Reporting

    Every finding is documented with a severity rating, its impact, the steps to reproduce it and a concrete remediation the team can act on.

  6. Remediation verification

    Submitted fixes are re-reviewed against the original finding, and the final report records the resolved state of each one.

Standards and references

  • SWC RegistrySmart Contract Weakness Classification
  • CWECommon Weakness Enumeration

FAQ

The review reported no security findings across critical, high, medium, low and informational severity.

2 source files were reviewed. The published report lists every file covered.

This report covers the code as reviewed in March 2022. Any code changed after that point is outside the reviewed scope.

Disclaimer

This audit represents a point-in-time security assessment of the reviewed codebase and is intended for informational purposes only. While Softstack applies industry-standard security review methodologies, no audit can guarantee the absence of vulnerabilities, bugs, or other security risks. This report does not constitute financial, legal, regulatory, or investment advice, nor does it endorse the project, its business model, products, or services. Security is an ongoing process, and we strongly recommend conducting a new assessment following any material code changes or at least every 6 months to address newly emerging threats, vulnerabilities, and ecosystem developments.