Token audit · 10.26

HES (Hacken Equity Share) Token Audit

hacken.io/rwa
Final rating – CCC37/100

HES is a token on equity in Hacken: 0.1% of the company per slot, 100 slots, priced at 1M HAI per slot. The offering ran through the Brickken platform between March and May 2024, with KYC and whitelisting. Dividends, governance access and three exits were promised: an IPO by 2027, an authorized secondary market and buybacks in future rounds. The Estonian share register of Hacken OÜ does not reflect token holders.

Download Audit PDF
Slots sold13 of 100 (soft cap 30)
Slot price1M HAI per 0.1%
2024 revenue€5.8m
2024 profit€1.2m
Entry valuation≈$88m at HAI market cap
Secondary marketnot launched

The business is real and profitable; the token's claim on equity is not proven

A real operating business with public financials: €5.8m revenue and €1.2m profit for 2024, mandatory KYC on a dedicated tokenization platform.

Hacken OÜ's register is split among nine parties with no HES holders and no nominee, the entry price was set by the HAI rate, none of the three exits has opened, and the issuer suffered a key compromise on its own HAI token.

1. Token passport

FieldValueSource
NameHacken Equity Share (HES)hacken.io/rwa
Share issuerHacken OÜ, Estonia, reg. code 14351915, founded 13 October 2017. The offer page also mentions a "UK PLC holding" without naming itBrickken announcement (2023), Äriregister via datreal, hacken.io/rwa
Tokenization operatorBrickken Solutions S.L. (Spain), issuance platform, KYC and whitelistingbrickken.com, hacken.io
Underlying assetStated as 10% of Hacken's equity, split into 100 slots of 0.1% eachhacken.io/rwa
Legal natureNot disclosed. Marketing: "tokenized equity", dividends and governance participationBrickken, hacken.io
NetworkEthereum (HES issuance). HAI swaps were also accepted manually from BSC and VeChainhacken.io/rwa, Chainspot
Contract addressNot disclosed, not found in public sourcesetherscan search
LaunchAnnounced 13 March 2024, placement window extended to 13 May 2024Chainwire, hacken.io/rwa
Slot price1M HAI per slot (0.1%), no fiat price was sethacken.io/rwa
Placed13 of 100 slots (1.3% of equity) against a soft cap of 30 slotshacken.io/rwa
BurnStated burn of 87% of HAI received (≈11.3M HAI of 13M, calculated)Chainwire
EligibilityKYC on Brickken, private placement for qualified investors selected by Hackenhacken.io/rwa (disclaimer)
Secondary marketPromised "soon" in 2024, not launched as of 26 October 2026hacken.io/rwa
HES code auditNot found-
Ticker collisionHES matches the exchange ticker of Hess Corporation (NYSE). For search and compliance purposes this is noise-

For a UAE investor the first question is not the valuation but the register. VARA in Dubai and the ADGM regime treat a token representing equity in a private company as a security, and they expect the chain from holder to share to be documented: a nominee agreement or a register entry, a licensing basis for the offer, and a stated route out. An Estonian private placement with KYC on a Spanish platform does not travel into the Emirates on its own.

2. Verdict and red flags

FieldValue
In one sentenceHES sells a fragment of a real and profitable company, but there is no public evidence that the token confers a legal right to that fragment.
Score and grade36.5/100, rounded to 37/100, grade CCC (risky)
Main strengthHacken OÜ runs a real business and publishes annual reports: revenue of €5.8m and profit of €1.2m for 2024.
Main weaknessIn the Hacken OÜ share register, 100% of the shares are allocated among nine persons; none of them is an HES holder, a nominee or Brickken.
What would change the scorePublication of a document linking HES to the stake (an agreement with the nominee or a register entry), an independent valuation and a dividend history would raise the score to ~53/100 (BB).
Red flagConsequenceStatus
No confirmed claim to the stakeThe holder may have no enforceable right to 0.1% of the equity. Cap C in v1, CCC in v2Triggered: the share register shows neither HES holders nor a nominee
Price set by the issuer without an independent valuationEntry at a price determined by the HAI exchange rate. Cap C in v1, CCC in v2Triggered
Ownership structure not disclosed (nominee, SPV, "UK PLC holding")Unclear whose stake it is and in which company. Cap B in v1, BBB in v2Triggered
Discrepancy in fee disclosure-5 pointsNot applicable: fees are not disclosed at all, accounted for in Block 7
SanctionsNot scoredNot identified

The final 37/100 already corresponds to grade CCC, so the flag caps do not lower it further.

The core question for any equity token is what the holder legally receives. For HES, the answer exists only in marketing.

#CriterionFindingScore
1HES legal form is described (share, nominee, contractual claim)The document defining the form has not been published. "Related documentation" is mentioned for whitelisted investors, but its contents are not disclosed1.5
2Holder is recorded in the register or has an enforceable claimAccording to Äriregister (via datreal), 100% of Hacken OÜ is split among nine shareholders: D. Budorin 62.34%, Fiat Lux Investments LLC 20%, and other individuals. No HES holders, nominee or Brickken appear. The 1.3% that was placed is not visible in the register0
3Dividend right is establishedBrickken refers to a right to dividends, and hacken.io says holders "are already receiving benefits." No terms, policy or payouts were found1
4Governance rights are established"Participation in governance" and access to board meetings are claimed. A statutory vote and access to meetings are not the same thing. No terms1
5Investor documents are publicTerm sheet, shareholders' agreement and buyback terms are not published1.5
Block conclusion

Score: 5 out of 15 (sum 5 out of 15) Key takeaway: Holder rights are described in promotional language, and the publicly available register shows neither HES holders nor a nominee. Risk level: high

4. Ownership chain and custody (weight 10)

The chain investor → token → nominee or SPV → stake should be visible at every link. Here, no link after the token is visible.

#CriterionFindingScore
1The company in which HES confers a stake is identified2023 announcement: 10% of Hacken OÜ. Offer page: "Benefit from our UK PLC holding". Which company this is and how the two are related is not disclosed1
2Who holds the shares on behalf of token holdersNo nominee, trust or SPV is named1.5
3Class and number of shares per slotOnly a percentage (0.1%), with no number of shares and no class. Hacken OÜ equity: €10,0001
4Link between the token and the register (who updates it and how)Brickken states that ownership is recorded "on the blockchain". The link between the on-chain record and the corporate register is not disclosed1.5
5Dilution protectionNot disclosed whether the 0.1% is preserved in new rounds or in a possible restructuring under the UK holding1.5
Block conclusion

Score: 4.33 of 10 (total 6.5 of 15) Key takeaway: Even the company whose stake the token represents is unclear: the Estonian Hacken OÜ or an unnamed UK holding. Risk level: high

5. Regulation and investor eligibility (weight 5)

The offering is structured as a private placement. This reduces disclosure requirements but does not settle the question of the instrument's status.

#CriterionFindingScore
1Offering regime statedDisclaimer: not a public offering; a private placement for qualified investors selected by Hacken2
2Prospectus, license or exemption statedThe specific exemption (e.g., under the EU Prospectus Regulation) and the operator's license are not specified1.5
3KYC/AMLMandatory KYC on Brickken: face scan, ID document, proof of address2
4Restricted jurisdictionsThe FAQ includes a question on whether US citizens are eligible, but the answer is not displayed in the static version of the page1.5
5Resale restrictionsNot disclosed. An "authorized" secondary market and P2P transfers are promised without stated conditions1.5
Block conclusion

Score: 2.83 out of 5 (total 8.5 out of 15) Key takeaway: KYC is in place, but the legal basis for the offering and the resale rules are not stated. Risk level: medium

6. Valuation and NAV (weight 15)

The slot price is pegged to the HAI exchange rate. This means that Hacken's entry valuation was set by the utility-token market, not by a valuer.

#CriterionFindingScore
1Valuation method disclosedPrice of 1M HAI for 0.1% with no fiat valuation. Hacken itself refers to “varying fiat prices due to asset volatility”0
2Independent valuationNot found1.5
3Entry valuation consistent with fundamentalsWith a HAI market cap of $57m and 645.7m HAI in circulation as of 13.03.2024, a slot was worth ≈$88,000, implying a valuation of ≈$88m for 100% of the company. At the HAI peak on 24.03.2024 ($0.221), ≈$221m. For comparison: in 2023 Hacken OÜ reported revenue of €2.5m and a loss of €1m, with equity of €1.1m (8Blocks calculation)0
4Regular reporting to holdersNot disclosed. Only Hacken OÜ's annual reports in the registry are publicly available1.5
5HES market priceNo trading, no price0
Block conclusion

Score: 3 of 15 (sum 3 of 15) Key takeaway: An entry valuation in the tens of millions of dollars against revenue of €2.5m and a loss in the last reporting year before the offer, and with no independent valuation. Risk level: high

7. Fees and net return (weight 20)

Hacken has not disclosed any direct fees. The main entry cost is hidden in the mechanics: the investor pays with a token whose price is volatile, and 87% of that token is burned.

#CriterionFindingScore
1Entry feeNot disclosed (neither by Hacken nor by Brickken)1.5
2Entry price transparencyThe price depends on the rate at which the investor bought HAI. For the same 0.1%, entry could have cost anywhere from ≈$88,000 to ≈$221,000 within March 20241
3Ongoing costsNot disclosed1.5
4Dividend policy and track recordHolders are stated to be "already receiving benefits." No amounts, dates or profit-distribution decision were found1
5Exit price and termsNot disclosed: a buyback is promised "in subsequent rounds" with no price formula1.5
Block conclusion

Score: 8.67 out of 20 (sum 6.5 out of 15) Key takeaway: The holder's return cannot be calculated because neither the exit price nor any payouts are known. A $100,000 example cannot be built, since all parameters except the entry price are missing. Risk level: high

8. Liquidity, exit and IPO scenario (weight 15)

Three exit routes were promised: an IPO in 2027, an authorised secondary market and buybacks in future rounds. 2.5 years after the offering, none has materialised.

#CriterionFindingScore
1Secondary market is operationalPromised "soon after the round ends" in May 2024. Not launched as of 26.10.20260
2Buyback mechanism with defined termsOnly the wording "consider seizing exit opportunities" in future rounds and M&A1
3Path to IPOIPO targeted for 2027. No evidence of listing preparation (prospectus, auditor, exchange) in public sources1
4P2P transfer"Immediate peer-to-peer options" are claimed, but the terms and the recipient whitelisting procedure are not disclosed1
5Depth of holder base13 slots against a soft cap of 30. The round was described as "successfully completed" even though the soft cap was not reached, and the consequences of missing it were not explained0
Block conclusion

Score: 3 of 15 (total 3 of 15) Key takeaway: The holder has neither a market nor a contractual right to a buyback. Exit depends entirely on future decisions by the controlling shareholder. Risk level: high

9. Smart contract and technical rights (weight 5)

The HES contract has not been published. The issuer does, however, have a recent incident involving the keys to its own token.

#CriterionFindingScore
1Contract address published and verifiedNot found1.5
2HES code auditNot found. For a smart-contract auditor, the absence of its own audit is particularly conspicuous1.5
3Compliance functions and privileged rolesBrickken states whitelisting and automated payout distribution. Roles (mint, freeze, forced transfer) are not disclosed1
4Issuer's key-management historyOn 21.06.2025 a key with the minter role for HAI on Ethereum and BNB Chain was compromised: ~900M HAI were minted, losses of ~$250,000, and the HAI price fell by ~97%. Hacken acknowledged the error and the absence of multisig0
Block conclusion

Score: 1.67 out of 5 (sum 4 out of 12) Key takeaway: The HES contract cannot be verified, and the HAI incident shows that the issuer's key-management processes have failed. Risk level: high

10. Underlying asset: Hacken OÜ (weight 15)

The strongest block of the audit. The business exists, files reports and was profitable in 2024.

Metric202220232024
Revenue€3.6m-€1m€5.8m
Net profit€1.9m-€1m€1.2m
Equity€2.3m€1.1m€2.4m

Source: Hacken OÜ annual reports in the Äriregister, data via the datreal aggregator. The auditor did not find a report for 2025.

#CriterionFindingScore
1Scale and public reportingAnnual reports are filed regularly. 2024 revenue €5.8m, up 2.3x on 20232
2Profitability2024: profit €1.2m. 2023: loss €1m. Unstable, but positive in the latest year2
3Consistency between claims and reportingIn 2023 the press cited revenue of 9m for 2022, while the Hacken OÜ report for 2022 shows €3.6m. Website: 100+ employees; EMIS profile: 1 employee at Hacken OÜ in 2024. Part of the business is likely held in other legal entities that are not part of HES1
4Market positionRecognised Web3 security auditor since 2017; claims clients of the calibre of Revolut and Nubank (per press release)2
5Reputational riskThe HAI incident in June 2025 struck at the company's core competence, security1
Block conclusion

Score: 8 out of 15 (total 8 out of 15) Key takeaway: The company is real and was profitable in 2024, but claims about the group's scale diverge from the reporting of the legal entity in which a stake was offered. Risk level: medium

11. Scoring and risk matrix

BlockWeightScoreRisk
3. Legal nature and holder rights155high
4. Chain of ownership and custody104.33high
5. Regulation and investor eligibility52.83medium
6. Valuation and NAV153high
7. Fees and net yield208.67high
8. Liquidity, exit and IPO scenario153high
9. Smart contract and technical rights51.67high
10. Underlying asset: Hacken OÜ158medium
Total10036.5 → 37grade CCC

The total of 36.5 is rounded up to 37, which corresponds to grade CCC. The red-flag caps (CCC and BBB) are not below the actual grade and do not change it.

RiskLikelihoodImpactMitigantBlock
The token does not confer an enforceable right to a shareMediumCriticalPublication of the agreement and the share register entries3, 4
The share ends up in a different company (UK holding) or is dilutedMediumHighDisclosure of the group structure and anti-dilution4
No exit materialises (no market, buyback or IPO)HighHighContractual buyback offer, market launch8
Overpayment at entryHighHighIndependent valuation of Hacken OÜ6
No dividendsHighMediumShareholders' resolution on profit distribution7
Operational failure of the contract or keysLowMediumContract publication, audit, multisig9
A merger of HES with HAI changes holders' rightsMediumHighTerms of the "merge" announced in June 20253, 8

12. Questions for the issuer, limitations, sources

Questions for the issuer

  1. Which document defines the rights of an HES holder, and can it be obtained before purchase?
  2. Who is recorded in the Hacken OÜ share register for the 13 placed slots: a nominee, Brickken, D. Budorin?
  3. What is the "UK PLC holding", how is it related to Hacken OÜ, and a stake in which company does HES represent?
  4. How many shares, and of what class, stand behind one slot, and what happens to the 0.1% in new rounds?
  5. Have dividends been paid to HES holders, and if so, when and in what amount?
  6. What happened to the placement after the soft cap was missed (13 of 30): were HAI refunds made?
  7. What is the HES contract address, who holds the roles, and has the code been audited?
  8. How will HES holders be affected by the merger of HAI with Hacken's equity announced in June 2025?
  9. Is there an independent valuation of Hacken OÜ on which the price of 1M HAI per slot was based?
  10. Which jurisdictions are excluded from the placement, and under which prospectus exemption was it conducted?

Method limitations and right of reply

  • Register data was obtained via the datreal aggregator rather than a direct extract from the Äriregister. The date of the share register snapshot is not stated. If HES holders are recorded through a nominee in another group company, criterion 2 of block 3 and the related flags will be revisited.
  • The FAQ answers on hacken.io/rwa are loaded by a script and were not read. They may contain information on jurisdictions and rights.
  • The entry valuation is calculated from HAI market capitalization on 13.03.2024 and the all-time high of 24.03.2024. The actual rate of each exchange is unknown.
  • Financial figures are in euros, the valuation is in dollars. Direct multiples were not calculated, to avoid mixing currencies.
  • Right of reply: Hacken may provide documents, after which the audit will be recalculated.

Sources

What this means for UAE investors and issuers

Three lessons from HES apply to any tokenized private-equity product distributed in the region.

- The register is the security. Hacken OÜ files public accounts and made €1.2m in 2024, yet its shareholder register lists nine parties and none of them is a token holder or a nominee. Under VARA and ADGM rules that gap alone stops a distribution review: the holder must be able to point to an enforceable claim, not to marketing copy.

- A utility-token price is not a valuation. Slots were priced in HAI, so the same 0.1% cost about $88,000 on 13 March 2024 and about $221,000 eleven days later. Regulators here expect an independent valuation of the underlying and a stated basis for the offer price.

- Promised exits are not exits. No secondary market, no buyback terms and no listing preparation after 2.5 years. A product that locks capital without a date or formula will not clear a UAE retail review, and the same applies to a token used as collateral.

We run these structure reviews out of Dubai, so if you are issuing a token on private equity here, we can go through the ownership chain, the holder document and the exit mechanics in one pass.

Final audit conclusion

HES: 37/100, grade CCC, the token is risky

HES sells a fragment of a real and profitable company, but there is no public evidence that the token gives a legal right to that fragment.

BlockScoreRiskKey finding
3. Legal nature and holder rights5/15highHolder rights are described in marketing language, and the publicly available register shows neither HES holders nor a nominee.
4. Chain of ownership and custody4.33/10highIt is unclear even which company the token represents a share in: Estonian Hacken OÜ or an unnamed UK holding company.
5. Regulation and investor eligibility2.83/5mediumKYC was carried out, but the legal basis for the placement and the resale rules are not stated.
6. Valuation and NAV3/15highAn entry valuation in the tens of millions of dollars against revenue of €2.5m and a loss in the last reporting year before the offer, with no independent valuation.
7. Fees and net return8.67/20highThe holder's return cannot be calculated: neither the exit price nor the payouts are known. A $100,000 example cannot be built, as all parameters except the entry price are missing.
8. Liquidity, exit and IPO scenario3/15highThe holder has neither a market nor a contractual right to a buyback. Exit depends entirely on future decisions of the controlling shareholder.
9. Smart contract and technical rights1.67/5highThe HES contract cannot be verified, and the HAI incident shows that the issuer's key management processes have failed.
10. Underlying asset: Hacken OÜ8/15mediumThe company is real and was profitable in 2024, but claims about the group's scale diverge from the financial statements of the legal entity whose shares were offered.

Strengths

  • A real operating business with public annual reports and a profit of €1.2m in 2024.
  • Mandatory KYC via a specialised tokenisation platform.
  • Transparent core offer parameters: 100 slots, 0.1% each, 1M HAI per slot.

Key risks

  • The token's right to a share is not confirmed by the register.
  • It is unclear which company stands behind the stake.
  • Not a single exit path has been realised in 2.5 years.
  • The entry valuation was driven by the HAI price, not by fundamentals.
  • The issuer has suffered a compromise of its own token's keys.

Who it suits and who it does not

Suits: a HAI holder who views HES as a symbolic bet on Hacken and is prepared for zero liquidity with no time limit.

Does not suit: an investor who needs a provable ownership right, a clear exit or regular income.

What would raise the score

Publication of a document linking HES to the stake (an agreement with the nominee or an entry in the register), an independent valuation and a dividend track record would lift the score to ~53/100 (BB).

Re-rating triggers

  • Publication of an agreement linking HES to the stake.
  • A change in the share register of Hacken OÜ.
  • Launch of a secondary market or a buyback offer.
  • Announcement of terms for merging HAI with Hacken's equity.
  • Filing of a listing application.

This audit reflects 8Blocks' opinion based on public data as of the date of preparation and does not constitute investment advice, an offer or a legal opinion.

Contacts

Website RU: токеномика.рф

This audit reflects 8Blocks' opinion based on public data as of the date of preparation and does not constitute investment advice, an offer or a legal opinion.

Final rating

Block profile

Block profile — Final ratingLegal nature and holder rightsOwnership chain and custodyRegulation and investor eligibilityValuation and NAVFees and net returnLiquidity, exit and the IPO scenarioSmart contract and technical rightsUnderlying asset: Hacken OÜ

Breakdown (0–100)

Legal nature and holder rights33.4
Ownership chain and custody43.4
Regulation and investor eligibility56.6
Valuation and NAV20
Fees and net return43.4
Liquidity, exit and the IPO scenario20
Smart contract and technical rights33.4
Underlying asset: Hacken OÜ53.4

Summary

HES sells 0.1% of a profitable company, Hacken OÜ, but the share register shows neither token holders nor a nominee. The slot price was set by the HAI utility token, and none of the three promised exits has opened in 2.5 years. Final score 37 out of 100, grade CCC.

This audit is not investment advice. Use it as part of your own analysis.

Final rating

37/100

Rating CCC

Author Toni Efren
Lead expertToni EfrenCo-founder, 8Blocks
BlockWeightScore (0–5)Score (0–100)Contribution
Legal nature and holder rights15%1.6733.45
Ownership chain and custody10%2.1743.44.3
Regulation and investor eligibility5%2.8356.62.8
Valuation and NAV15%1203
Fees and net return20%2.1743.48.7
Liquidity, exit and the IPO scenario15%1203
Smart contract and technical rights5%1.6733.41.7
Underlying asset: Hacken OÜ15%2.6753.48
Total100%1.83736.5

Read the blog article

Read blog article