BlastOff Smart Contracts Review

ZokyoRepository at commit d9164fc

Audit · firm’s term: smart contract review

Zokyo reviewed BlastOff (BlastOff Smart Contracts Review) on 14 Mar 2024: 16 findings, 1 critical; 13 marked fixed, 3 open.

1 critical finding, fixed
Open the reportOpen BlastOff’s security record
Report stored on IPFS. Content hash QmS1yCC8pw4zx4foSeQYVCtvqXt2DXwGKT96Wra6KsV5wx

Trustblock does not review code.

Findings16

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High002
Medium003
Low307
CriticalUnauthorized Withdrawal of Staked ETH via repayWithStakeToken FunctionFixed

The report gives no description here.

HighIncorrect token transfer source in the stake function of NonLockStakingPools contractFixed

The report gives no description here.

HighPossibility of griefing users via front-runningFixed

The report gives no description here.

MediumIncorrect Logic to Prevent Excessive StakingFixed

The report gives no description here.

MediumMisplaced stake limit validation in stake function of LockedStakingPools contractFixed

The report gives no description here.

MediumPremature Finalization Vulnerability in IDOPoolAbstract ContractFixed

The report gives no description here.

LowLack of Input Validation for setTokenPriceInUSD FunctionFixed

The report gives no description here.

LowMissing Event EmissionFixed

The report gives no description here.

LowMissing Event Emissions for Critical ActionsFixed

The report gives no description here.

LowRedundant Assignment of idoSize in finalize FunctionFixed

The report gives no description here.

Show 3 more
LowUpgradeable contracts missing method to disable initializers for implementation contractsFixed

The report gives no description here.

LowUse of single step ownership transferFixed

The report gives no description here.

LowZero Address CheckFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (9)

  • https://github.com/BlastOffOrg/future-yield-contracts/contracts/ido/ETHIDOPool.sol at commit d9164fc33ad4de4c6c24792f0354a382069e67d3
  • https://github.com/BlastOffOrg/future-yield-contracts/contracts/RoleControl.sol at commit d9164fc33ad4de4c6c24792f0354a382069e67d3
  • https://github.com/BlastOffOrg/future-yield-contracts/contracts/LockedStakingPools.sol at commit d9164fc33ad4de4c6c24792f0354a382069e67d3
  • https://github.com/BlastOffOrg/future-yield-contracts/contracts/lib/TokenTransfer.sol at commit d9164fc33ad4de4c6c24792f0354a382069e67d3
  • https://github.com/BlastOffOrg/future-yield-contracts/contracts/ido/USDIDOPool.sol at commit d9164fc33ad4de4c6c24792f0354a382069e67d3
  • https://github.com/BlastOffOrg/future-yield-contracts/contracts/NonLockStakingPools.sol at commit d9164fc33ad4de4c6c24792f0354a382069e67d3
  • https://github.com/BlastOffOrg/future-yield-contracts/contracts/ido/IDOPoolAbstract.sol at commit d9164fc33ad4de4c6c24792f0354a382069e67d3
  • https://github.com/BlastOffOrg/future-yield-contracts/contracts/oracle/ETHPriceOracle.sol at commit d9164fc33ad4de4c6c24792f0354a382069e67d3
  • https://github.com/BlastOffOrg/future-yield-contracts/contracts/YieldToken.sol at commit d9164fc33ad4de4c6c24792f0354a382069e67d3

Part of BlastOff’s security record

BlastOff
Audits1 audit by 1 firmLast audit Mar 2024, by Zokyo.
Critical findingsNo open critical findingsIn that report, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open BlastOff’s security record

Security firm

Zokyo

89 projects reviewed · 131 reports · latest Feb 2025

See Zokyo’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us