Metis - Vesting

QuillAudits8 Mar 2024Files named in the report

Audit · firm’s term: audit report

QuillAudits reviewed Metis (Metis - Vesting) on 8 Mar 2024: 3 findings, 0 critical; 1 marked fixed, 2 open.

No open critical findings

Open the report Open Metis’s security record

Report hosted on quillaudits.com.

Trustblock does not review code.

Findings3

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	0	0
Medium	1	0
Low	1	1

MediumNative tokens sent into the contract is not irredeemableOpen

The vault is designed with the receive payable function which makes the contract capable of receiving native tokens. However, it fails to implement a corresponding function to to withdraw native tokens sent into it. This implies that if the contract receives native tokens, they will be stuck in the contract as there is no function to withdraw.

LowCentralization IssueOpen

There are some critical functions in the contract with the whenNotPaused modifier which restricts when it can be invoked by anyone or not. Since the contract owner can pause and unpause the contract, activities on the contract could be halted by a malicious contract owner.