Folks Finance - Audit 1

CertiK12 Dec 2022Code version: not recorded (see the report)

Audit

CertiK reviewed Folks Finance (Folks Finance - Audit 1) on 12 Dec 2022: 3 findings, 0 critical; 2 acknowledged, 1 open.

No open critical findings

Open the report Open Folks Finance’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings3

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged
Critical	0	0
High	1	0
Medium	0	0
Low	0	2

LowOut of Scope DependenciesAcknowledged

The scope of the audit treats out-of-scope Folks finance pool contracts as black boxes and assumes their functional correctness. However, in the real world, those contracts can be compromised and this may lead to lost or stolen assets. Additionally, upgrades of those contracts can possibly create severe impacts.

LowPotential Loss of PrecisionAcknowledged

In the function `update_reward_per_token`, the timestamp is converted to uint32 in line 79 and stored to the reward array, which will cause precision loss during the conversion. The stored timestamp is used to compared with ` Global.latest_timestamp()`. If the precision loss is substantial, the result of the comparison might be affected.