Audit Report

Paladin10 Dec 20213 addresses on Ethereum

Paladin reviewed Highstreet (Audit Report) on 10 Dec 2021: 16 findings, 0 critical; 15 marked fixed, 1 acknowledged.

No open critical findings

Open the report Open Highstreet’s security record

Report hosted on paladinsec.co.

Trustblock does not review code.

Findings16

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	2
Medium	0	0	0
Low	0	1	13

HighGovernance can abuse totalWeight to prevent accumulation and collection of rewards, effectively pausing the contractFixed

The report gives no description here.

Highstake is vulnerable to re-entrancy, which allows reward amplification on tokens that allow for reentrancyFixed

The report gives no description here.

Low_isYield parameter to _stake is redundantFixed

The report gives no description here.

Low_poolToken is passed into getPoolData but not usedFixed

The report gives no description here.

LowEarly return causes update logic to not run if withUpdate was true and could cause issues or break invariantsFixed

The report gives no description here.

LowendBlock can be made immutableFixed

The report gives no description here.

LowLack of constructor validation: _initBlock is not required to be in the futureFixed

The report gives no description here.

Lowmsg.sender is unnecessarily cast to address(msg.sender)Fixed

The report gives no description here.

LowOutdated commentsFixed

The report gives no description here.

LowpoolToken is an IERC20 but is stored as an addressFixed

The report gives no description here.

Show 5 more

LowRedundant event parameter _by in PoolWeightUpdatedFixed

The report gives no description here.

LowupdateHighPerBlock will stop working after 365 yearsFixed

The report gives no description here.

LowUsage of assert while require is more adequateFixed

The report gives no description here.

LowWeight calculation biases towards 0 affecting rewards collected by usersFixed

The report gives no description here.

LowWhen governance sets a new weight, pending rewards are retroactively changed to use the new weightFixed

The report gives no description here.

Contracts in scope3

Address	Chain	Source code
0xf01e619e8618bff466877c524a85a5dbe1e36814	Chain: Ethereum	Source code: Verified source
0x03ce1fd60c31ab8b384725bcb0d8a3a46f87e20f	Chain: Ethereum	Source code: Verified source
0x4aeb443981b36b3352e50205469034a8719ca04e	Chain: Ethereum	Source code: Verified source

Part of Highstreet’s security record

Highstreet

Audits2 audits by 2 firmsLast audit Sep 2022, by HashEx.

Critical findingsNo open critical findingsAcross 2 reports.

Open Highstreet’s security record

Security firm

Paladin

176 projects reviewed · 241 reports · latest Apr 2025

See Paladin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.