Penpie Smart Contracts Review

ZokyoFiles named in the report

Audit · firm’s term: smart contract audit

Zokyo reviewed Magpie XYZ (Penpie Smart Contracts Review) on 13 Jul 2023: 27 findings, 0 critical; 19 marked fixed, 8 open.

No open critical findings
Open the reportOpen Magpie XYZ’s security record
Report stored on IPFS. Content hash QmNtH85dQCYQyq5JovgwXvKUqFKLcT24XEyMzA7zDjcoDp

Trustblock does not review code.

Findings27

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium105
Low7013
HighPossibility of Reentrance via vote()Fixed

The report gives no description here.

MediumCentralization risk in PendleVoteManagerFixed

The report gives no description here.

MediumCentralization risks in vlPenpieFixed

The report gives no description here.

MediumDenial of Service via setCoolDownInSecs()Fixed

The report gives no description here.

MediumIncorrect use of modifierFixed

The report gives no description here.

MediumUnsafe Uint64 Casting in PendleVoteManagerFixed

The report gives no description here.

LowDeclaration of gap variableFixed

The report gives no description here.

LowIncorrect Natspec commentsFixed

The report gives no description here.

LowIncorrect usage of signFixed

The report gives no description here.

LowInit function call missingFixed

The report gives no description here.

Show 9 more
LowLock SolidityFixed

The report gives no description here.

LowMissing forwarding of rewardsFixed

The report gives no description here.

LowMissing Reentrance init callFixed

The report gives no description here.

LowMissing zero address checksFixed

The report gives no description here.

LowRenounce OwnershipFixed

The report gives no description here.

LowReturned boolean value ignoredFixed

The report gives no description here.

LowUnnecessary redundant initialization of variablesFixed

The report gives no description here.

LowUnprotected initializer could be called by anyoneFixed

The report gives no description here.

LowUnused modifierFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (5)

  • PendleVoteManagerSideChain.sol
  • PendleVoteManagerBaseUpg.sol
  • vlPenpie.sol
  • PendleVoteManagerMainChain.sol
  • PenpieOFT.sol

Part of Magpie XYZ’s security record

Magpie XYZ
Audits3 audits by 2 firmsLast audit Jul 2023, by Zokyo.
Critical findingsNo open critical findingsAcross 3 reports.
Open Magpie XYZ’s security record

Security firm

Zokyo

89 projects reviewed · 131 reports · latest Feb 2025

See Zokyo’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us