Audit Report

Paladin13 Mar 20237 addresses on Ethereum

Paladin reviewed Offshift (Audit Report) on 13 Mar 2023: 22 findings, 0 critical; 16 marked fixed, 3 acknowledged, 3 open.

No open critical findings

Open the report Open Offshift’s security record

Report hosted on paladinsec.co.

Trustblock does not review code.

Findings22

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	3
Medium	0	0	1
Low	3	3	12

HighFrontend centralization risk allows the governance team to potentially record all secrets and withdraw all notes at a later point in timeFixed

The report gives no description here.

HighGovernance risk: Governance has critical control over the Oracle mechanismFixed

The report gives no description here.

HighRPC providers have insight into all note encryption keys and can steal all notesFixed

The report gives no description here.

MediumLack of any validation on the ChainLink answer could cause a malfunctioning response to severely impact the oracle through implicit integer overflowFixed

The report gives no description here.

LowContract lacks a function for the user and frontend to fetch the number of deposits under a given passwordFixed

The report gives no description here.

LowGas optimizationsFixed

The report gives no description here.

LowGas optimizationsFixed

The report gives no description here.

LowGas optimizationsFixed

The report gives no description here.

LowLack of events for setOracle and simpleShiftFixed

The report gives no description here.

LowLack of events for various functionsFixed

The report gives no description here.

Show 6 more

LowLack of events for various functionsFixed

The report gives no description here.

LowLack of safeguards for setFlexFeeThresholdFixed

The report gives no description here.

Lowlevels can be made immutableFixed

The report gives no description here.

LowOracle might round in favor of the userFixed

The report gives no description here.

LowTypographical errorsFixed

The report gives no description here.

LowTypographical errorsFixed

The report gives no description here.

Contracts in scope7

Address	Chain	Source code
0x76bc677d444f1e9d57daf5187ee2b7dc852745ae	Chain: Ethereum	Source code: Verified source
0x8997f152a1da95fc7f966bddd64571c9ad11075e	Chain: Ethereum	Source code: Verified source
0xd5e9156e77c88f1cc7a49291256adc643a163747	Chain: Ethereum	Source code: Verified source
0x3704e2af0e5a828549f9ff9da93eda10a7ccf402	Chain: Ethereum	Source code: Verified source
0x0993a120c265ac7305347190579db9a28bae5fd2	Chain: Ethereum	Source code: Verified source
0x5a7e6c8204a1359db9aacab7ba5fc309b7981efd	Chain: Ethereum	Source code: Verified source
0x207793a5a08e1da37b44c874a5006d32cf1d52c8	Chain: Ethereum	Source code: Verified source

Part of Offshift’s security record

Offshift

Audits1 audit by 1 firmLast audit Mar 2023, by Paladin.

Critical findingsNo open critical findingsIn 1 report.

Open Offshift’s security record

Security firm

Paladin

176 projects reviewed · 241 reports · latest Apr 2025

See Paladin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.