Audit Report
Paladin reviewed Kavian Finance (Audit Report) on 21 Sep 2021: 20 findings, 0 critical; all acknowledged, none fixed.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings20
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 20 | 0 |
Lowadd, set, deposit, withdraw, emergencyWithdraw, setDevAddress, setFeeAddress, setTeamAddress, updateEmissionRate, setKavianL2Referral and setReferralCommission functions can beAcknowledged
The report gives no description here.
LowAdding an EOA or a non-token contract as a pool will break updatePool and massUpdatePoolsAcknowledged
The report gives no description here.
LowBONUS_MULTIPLIER is redundantAcknowledged
The report gives no description here.
LowContract uses raw additionAcknowledged
The report gives no description here.
LowdelegateBySig can be frontrun and cause denial of serviceAcknowledged
The report gives no description here.
LowDuplicated pools may be added to the MasterchefAcknowledged
The report gives no description here.
LowExcluding zero address can be removedAcknowledged
The report gives no description here.
LowFunctions can be made externalAcknowledged
The report gives no description here.
LowGovernance functionality is brokenAcknowledged
The report gives no description here.
LowIncorrect commentAcknowledged
The report gives no description here.
Show 10 more
Lowkavianl2 can be made immutableAcknowledged
The report gives no description here.
LowLack of events for add, set, setDevAddress, setFeeAddress, setTeamAddress, setKavianL2Referral, setReferralCommission and setStartBlockAcknowledged
The report gives no description here.
LowLack of events for setExcludedFromAntiWhale, setLiquidityAddress and setSwapPairAcknowledged
The report gives no description here.
LowLP tokens are sent to the operator address which could be an EOAAcknowledged
The report gives no description here.
LowPools use the contract balance to figure out the total depositsAcknowledged
The report gives no description here.
LowRounding vulnerability to tokens with a very large supply can cause large supply tokens to receive zero emissionsAcknowledged
The report gives no description here.
LowThe pendingKavianL2 function will revert if totalAllocPoint is zeroAcknowledged
The report gives no description here.
LowThe updateMaxTransferAmountRate minimum safeguard is tooAcknowledged
The report gives no description here.
LowThere are no sanity checks in the setKavianL2Referral functionAcknowledged
The report gives no description here.
LowupdateEmissionRate has no maximum safeguardAcknowledged
The report gives no description here.
Contracts in scope2
| Address | Chain | Source code |
|---|---|---|
| 0x9a33bac266b02faff8fa566c8cb5da08820e28ba | Chain: Polygon (POS) | Source code: Verified source |
| 0xb664c98548cebf7024f899e32e467dff00311918 | Chain: Polygon (POS) | Source code: Verified source |
Part of Kavian Finance’s security record
Security firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us