Verse Farms (2023)

CertiK8 Feb 2023Files named in the report

CertiK reviewed Verse (Verse Farms (2023)) on 8 Feb 2023: 9 findings, 1 critical; 4 marked fixed, 1 acknowledged, 4 open.

1 critical finding, fixed

Open the report Open Verse’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	1
High	0	1	0
Medium	0	0	0
Low	4	0	3

LowLack of sufficiency check for amount parameterOpen

It is important to have proper checks in place for user balance and allowance balances in the aforementioned functions of the smart contract. A more thorough check may be required to make sure that the balances are not going insufficient to give the custom error message because the built-in overflow check might not be accurate enough to detect problems.

LowMissing input validation for amountOpen

The aforementioned functions don't verify that the amount or value is zero. Calling these functions will have no effect on the contract's state if the amount or value is 0.

LowMissing Zero Address Validation in `TokenWrapper.Open

The aforementioned parameters are missing the zero address check. It is not suitable to transfer tokens to a zero address, approve allowances to a zero address, or transfer from a zero address.

LowUser-Defined GettersOpen

The linked functions are equivalent to the compiler-generated getter functions for the respective variables.