Aavegotchi GHST Staking

Quantstamp15 Oct 2020Files named in the report

Quantstamp reviewed Aavegotchi (Aavegotchi GHST Staking) on 15 Oct 2020: 7 findings, 0 critical; 3 marked fixed, 3 acknowledged, 1 open.

No open critical findings

Open the report Open Aavegotchi’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	1	0	0
Medium	0	0	0
Low	0	3	3

LowLack of non-zero check for addressFixed

The function `constructor()` does not check if arguments of type `address` are non-zero which may lead to invalid initialization.

LowThe interface `IERC20` not fully compatible with ERC20Fixed

The interface `IERC20` is not fully compatible with [ERC20](https://eips.ethereum.org/EIPS/eip-20) as the name would suggest. For example, the interface is missing `approve()`.

LowUnlocked PragmaFixed

Every Solidity file specifies in the header a version number of the format `pragma solidity (^)0.4.*`. The caret (`^`) before the version number implies an unlocked pragma, meaning that the compiler will use the specified version _and above_, hence the term "unlocked".