Audit Report - WINR Protocol
Paladin reviewed WINR Chain (Audit Report - WINR Protocol) on 12 Mar 2023: 26 findings, 0 critical; 23 marked fixed, 1 acknowledged, 2 open.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings26
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 2 | 1 | 22 |
MediumThe same investor can be added twice by governance which will cause supply to be locked awayFixed
The report gives no description here.
LowBURNER_ROLE seems to impose excessive privileges as people should not need a privilege to burn their own tokensFixed
The report gives no description here.
LowBURNER_ROLE seems to impose excessive privileges as users should not need a privilege to burn their own tokensFixed
The report gives no description here.
LowDateTime days will eventually start shifting compared to calendar daysFixed
The report gives no description here.
LowGas optimizationFixed
The report gives no description here.
LowGovernance can accidentally renounce their role by calling setGov to their own addressFixed
The report gives no description here.
LowInconsistent usage of msgSender() and msg.senderFixed
The report gives no description here.
LowInitialization of DEFAULT_ADMIN_ROLE is redundant with GovernableFixed
The report gives no description here.
LowInitialization of DEFAULT_ADMIN_ROLE is redundant with GovernableFixed
The report gives no description here.
LowInvestor start and end times do not align with the actual vest start and end timesFixed
The report gives no description here.
Show 10 more
LowLack of enumerability on role holders makes it difficult for people to inspect which accounts have privilegesFixed
The report gives no description here.
LowLack of explicit maximum supply handling can cause certain vesters to never receive their tokensFixed
The report gives no description here.
LowLack of validationFixed
The report gives no description here.
Lowmint will implicitly not mint any tokens once the maximum supply has been reached, which could lead to bugs within contracts which do not handle this caseFixed
The report gives no description here.
Lowmint will implicitly not mint any tokens once the maximum supply has been reached, which could lead to bugs within contracts which do not handle this caseFixed
The report gives no description here.
LowOpenZeppelin’s _setupRole is deprecated in favour of _grantRoleFixed
The report gives no description here.
LowRecurring rewards are sometimes slightly reduced due to unnecessary roundingFixed
The report gives no description here.
LowThe amount of tokens that can be minted can exceed MAX_SUPPLY as the cap does not take into consideration that burned tokens are removed from the supplyFixed
The report gives no description here.
LowThe amount of tokens that can be minted can exceed MAX_SUPPLY as the cap does not take into consideration that burned tokens are removed from the supplyFixed
The report gives no description here.
LowTypographical errorsFixed
The report gives no description here.
Show 3 more
LowTypographical errorsFixed
The report gives no description here.
LowTypographical errorsFixed
The report gives no description here.
LowTypographical errorsFixed
The report gives no description here.
Contracts in scope3
| Address | Chain | Source code |
|---|---|---|
| 0x6ed34c4d56b82a76e6540b7cc2d35000873e1dd6 | Chain: Arbitrum | Source code: Verified source |
| 0x63097e97ba51b64547cf1f4ba154495d7af74582 | Chain: Arbitrum | Source code: Verified source |
| 0xd77b108d4f6cefaa0cae9506a934e825becca46e | Chain: Arbitrum | Source code: Verified source |
Part of WINR Chain’s security record
WINR ChainSecurity firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us