NOAH

CertiKFiles named in the report

CertiK reviewed Noah on 5 Jul 2023: 6 findings, 0 critical; 1 marked fixed, 1 acknowledged, 4 open.

No open critical findings
Open the reportOpen Noah’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings6

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High010
Medium000
Low401
LowMissing Zero Address ValidationOpen

Addresses should be checked before assignment or external call to make sure they are not zero addresses. ```solidity=18 admin = _admin; ``` - `_admin` is not zero-checked before being used. --- ```solidity=47 feeTo = _feeTo; ``` - `_feeTo` is not zero-checked before being used. --- ```solidity=52 admin = _admin; ``` - `_admin` is not zero-checked before being used. --- ```solidity=73 token0 = _token0; ``` - `_token0` is not zero-checked before being used. --- ```solidity=74 token1 = _token1; ``` - `_token1` is not zero-checked before being used. --- ```solidity=25 factory = _factory; ``` - `_factory` is not zero-checked before being used. --- ```solidity=26 WETH = _WETH; ``` - `_WETH` is not zero-checked before being used.

LowUnchecked ERC-20 `transfer()`/`transferFrom()` CaOpen

The return value of the transfer()/transferFrom() call is not checked. ```solidity=137 INoahPair(pair).transferFrom(msg.sender, pair, liquidity); // send liquidity to pair ```

LowUnused Return ValueOpen

The return value of an external call is not stored in a local or state variable. ```solidity=44 INoahFactory(factory).createPair(tokenA, tokenB); ```

LowVariable That Could Be Declared as ImmutableOpen

```solidity=19 address public factory; ``` The above variables assigned in the constructor can be declared as `immutable`. Immutable state variables can be assigned during contract creation but will remain constant throughout the lifetime of a deployed contract. A big advantage of immutable variables is that reading them is significantly cheaper than reading from regular state variables since they will not be stored in storage.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (8)

  • contracts/libraries/NoahLibrary.sol
  • contracts/NoahRouter.sol
  • contracts/libraries/SafeMath.sol
  • contracts/libraries/Math.sol
  • contracts/libraries/UQ112x112.sol
  • contracts/NoahPair.sol
  • contracts/NoahFactory.sol
  • contracts/NoahERC20.sol

Part of Noah’s security record

Noah
Audits2 audits by 1 firmLast audit Jul 2023, by CertiK.
Critical findingsNo open critical findingsAcross 2 reports.
Open Noah’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us