Audit Report
Paladin reviewed Derive (Audit Report) on 20 Nov 2024: 12 findings, 0 critical; 5 marked fixed, 5 acknowledged, 2 open.
No open critical findings
Open the reportOpen Derive’s security record
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings12
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 3 |
| Medium | 0 | 1 | 0 |
| Low | 2 | 3 | 2 |
HighInefficient whitelist transfer restrictionsAcknowledged
The report gives no description here.
MediumPrecision loss due to ratio being in 0 decimalsAcknowledged
The report gives no description here.
LowApproved usage ambiguous functionalityAcknowledged
The report gives no description here.
LowImplementation getter not availableAcknowledged
The report gives no description here.
LowupdateDividendsAddress could result in loss of accrued dividendsAcknowledged
The report gives no description here.
Contracts in scope8
| Address | Chain | Source code |
|---|---|---|
| 0xc3d960b2d0a1d23b1d2073293fc80625d7fa1fbc | Chain: Optimism | Source code: Verified source |
| 0x7499d654422023a407d92e1d83d387d81bc68de1 | Chain: Ethereum | Source code: Verified source |
| 0xc3d960b2d0a1d23b1d2073293fc80625d7fa1fbc | Chain: Base | Source code: Verified source |
| 0x7499d654422023a407d92e1d83d387d81bc68de1 | Chain: Optimism | Source code: Verified source |
| 0xc3d960b2d0a1d23b1d2073293fc80625d7fa1fbc | Chain: Ethereum | Source code: Verified source |
| 0x7499d654422023a407d92e1d83d387d81bc68de1 | Chain: Base | Source code: Verified source |
| 0x7499d654422023a407d92e1d83d387d81bc68de1 | Chain: Arbitrum | Source code: Verified source |
| 0xc3d960b2d0a1d23b1d2073293fc80625d7fa1fbc | Chain: Arbitrum | Source code: Verified source |
Part of Derive’s security record
DeriveAudits6 audits by 2 firmsLast audit Mar 2025, by Sigma Prime.
Critical findings1 critical acknowledged, not fixedReported in “Derive security review” by Sigma Prime, Jan 2025. The team acknowledged it.
Open Derive’s security recordSecurity firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us