PoolTogether v3 Audit
Audit · firm’s term: audit
OpenZeppelin reviewed PoolTogether (PoolTogether v3 Audit) on 21 Oct 2020: 13 findings, 1 critical; all marked fixed.
Report hosted on blog.openzeppelin.com.
Trustblock does not review code.
Findings13
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 2 |
| Medium | 0 | 0 | 2 |
| Low | 0 | 0 | 8 |
Critical[C01] Funds can be lostFixed
The report gives no description here.
High[H01] Improper Error HandlingFixed
The report gives no description here.
High[H02] Trapped sponsorshipFixed
The report gives no description here.
Medium[M01] Capturing the award balance may failFixed
The report gives no description here.
Medium[M01] Inconsistent list initializationFixed
The report gives no description here.
Low[L01] Duplicate codeFixed
The report gives no description here.
Low[L01] Missing docstringsFixed
The report gives no description here.
Low[L02] Linked list contains SENTINALFixed
The report gives no description here.
Low[L02] Tests not passingFixed
The report gives no description here.
Low[L03] Lists can be initialized multiple timesFixed
The report gives no description here.
Show 3 more
Low[L04] Lack of event emission after sensitive changesFixed
The report gives no description here.
Low[L05] MappedSinglyLinkedList EncapsulationFixed
The report gives no description here.
Low[L06] Naming suggestionsFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (4)
- contracts/prize-pool/compound/CompoundPrizePool.sol
- contracts/token/ControlledToken.sol
- contracts/prize-pool/PrizePool.sol
- contracts/utils/MappedSinglyLinkedList.sol
Part of PoolTogether’s security record
PoolTogetherSecurity firm
OpenZeppelin67 projects reviewed · 184 reports · latest Aug 2026
See OpenZeppelin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us