Audit Report
Paladin reviewed Ball (Audit Report) on 29 Jul 2021: 11 findings, 0 critical; all marked fixed.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings11
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 2 |
| Low | 0 | 0 | 8 |
HighSeverely excessive rewards issue when a token with a transfer tax is addedFixed
The report gives no description here.
MediumSetting feeAddress to the zero address will break most functionalityFixed
The report gives no description here.
MediumStartBlock cannot be adjusted after pools have been addedFixed
The report gives no description here.
Lowadd, set, deposit, withdraw, emergencyWithdraw, updateEmissionRate and setFeeAddress can be made externalFixed
The report gives no description here.
LowAdding an EOA or a non-token contract as a pool will break updatePool and massUpdatePoolsFixed
The report gives no description here.
LowdelegateBySig can be frontrun and cause denial of serviceFixed
The report gives no description here.
Lowdev function can be renamed and made externalFixed
The report gives no description here.
LowLack of events for add, set and updateStartBlockFixed
The report gives no description here.
Lowmint function can be used to pre-mint large amounts of tokens before ownership is transferred to the MasterchefFixed
The report gives no description here.
LowPools use the contract balance to figure out the total depositsFixed
The report gives no description here.
Show 1 more
LowThe pendingBall function will revert if totalAllocPoint is zeroFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Ball’s security record
Security firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us