NitroDome
Audit · firm’s term: audit report
QuillAudits reviewed NitroDome Token (NitroDome) on 8 Apr 2024: 4 findings, 0 critical; 1 marked fixed, 3 open.
Report hosted on quillaudits.com.
Trustblock does not review code.
Findings4
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 2 | 0 | 0 |
| Low | 1 | 0 | 0 |
HighUser Vesting Values Are Overwritten When Address RepeatsFixed
In the addVestingScheduleForUser function, vesting schedules are assigned to users based on their address and a specific vesting schedule index. If multiple vesting schedules are assigned to the same user address with the same index, previous vesting data is overwritten. This results in potential loss of data regarding earlier vesting schedules, where only the last entry is preserved. This can lead to incorrect token allocations and could potentially be exploited if the overwriting behavior is not anticipated by administrators, leading to unintended financial consequences.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (4)
- NitroDome.sol
- -NitroDome.sol
- -Vesting.sol
- Vesting.sol
Part of NitroDome Token’s security record
NitroDome TokenSecurity firm
QuillAudits350 projects reviewed · 459 reports · latest Apr 2025
See QuillAudits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us