Audit Report (Staking)
Paladin reviewed Sculptor Finance (Audit Report (Staking)) on 13 Jun 2022: 43 findings, 0 critical; 19 marked fixed, 20 acknowledged, 4 open.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings43
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 6 |
| Medium | 3 | 1 | 4 |
| Low | 1 | 19 | 9 |
MediumRewards distributed to users should not be added to totalAcknowledged
The report gives no description here.
LowavailableForUser could revert due to a division by zeroAcknowledged
The report gives no description here.
LowLack of events for setMinters, addReward, getReward, exit, withdrawExpiredLocksAcknowledged
The report gives no description here.
LowLack of events for setParamsAcknowledged
The report gives no description here.
LowLack of events for start, batchUpdateAllocPoint, setOnwardIncentives, setClaimReceiver and claimAcknowledged
The report gives no description here.
LowLack of events for start, claim and constructor vester addingAcknowledged
The report gives no description here.
LowMinor errors, gas optimizations and improvementsAcknowledged
The report gives no description here.
LowPool uses the contract balance to figure out the total depositsAcknowledged
The report gives no description here.
LowprotocolOwnedReserves, buyFTM and superPODL can be made externalAcknowledged
The report gives no description here.
LowsafeTransfer and safeTransferFrom should be usedAcknowledged
The report gives no description here.
Show 10 more
Lowstart and batchUpdateAllocPoint can be made externalAcknowledged
The report gives no description here.
LowsuperPODL does not have a safeguard for _amountAcknowledged
The report gives no description here.
LowThe contract lacks zero address checksAcknowledged
The report gives no description here.
LowTypographical errorsAcknowledged
The report gives no description here.
LowTypographical errorsAcknowledged
The report gives no description here.
LowTypographical errors, gas optimizations and minor improvementsAcknowledged
The report gives no description here.
LowTypographical errors, minor mistakes and gas optimizationsAcknowledged
The report gives no description here.
LowUnused functionality: poolConfiguratorAcknowledged
The report gives no description here.
LowUnused import: IChefIncentivesController.solAcknowledged
The report gives no description here.
LowUser earning is not deleted if it is exactly removedAcknowledged
The report gives no description here.
Contracts in scope5
| Address | Chain | Source code |
|---|---|---|
| 0xe482676c4daa5156178c2e693c38e937521e9656 | Chain: BNB Chain | Source code: Verified source |
| 0xd4f7f739488f5c9930a60e85afbe26a8b71ba795 | Chain: BNB Chain | Source code: Verified source |
| 0x19a392f8fa8ffee07106200236f5b7078860d51c | Chain: BNB Chain | Source code: Verified source |
| 0x18542eee45272a29bc572f0edb727da4e3506dd2 | Chain: BNB Chain | Source code: Verified source |
| 0xad3e02e83b886543d1171ff446c130d52068c106 | Chain: BNB Chain | Source code: Verified source |
Part of Sculptor Finance’s security record
Sculptor FinanceSecurity firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us