KittenSwap security review
Audit · firm’s term: security review
Pashov Audit Group reviewed KittenSwap (KittenSwap security review) on 5 Aug 2025: 27 findings, 1 critical; 20 marked fixed, 7 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings27
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 3 |
| Medium | 0 | 0 | 3 |
| Low | 0 | 7 | 13 |
CriticalcarryVoteForward() enables double votingFixed
The report gives no description here.
HighPermissionless voting through Voter::carryVoteForward()Fixed
The report gives no description here.
HighRepeated distributions for killed gauges can block valid distributionsFixed
The report gives no description here.
HighReward rates can be reset to 0 and future rewards can be stolen from votersFixed
The report gives no description here.
MediumcarryVoteForward() violates vote immutabilityFixed
The report gives no description here.
MediumCommunity fees wasted if no voters in claimAndDistributeAlgebraPoolFees()Fixed
The report gives no description here.
MediumEmissions stuck if Voter.notifyRewardAmount() is called without votersFixed
The report gives no description here.
Low_createGauge() allows overwriting an existing gaugeFixed
The report gives no description here.
LowclaimAndDistributeAlgebraPoolFees() may revert on zero transfer failureFixed
The report gives no description here.
LowclaimVotingRewardBatch() allows early claims, missing rewardsFixed
The report gives no description here.
Show 10 more
LowEmission dust gets stuck due to rounding in _distribute()Fixed
The report gives no description here.
LowExpired locks can bypass expiry restriction via split() , regaining voting powerFixed
The report gives no description here.
LowFee claiming and reward distribution continues for dead gaugesFixed
The report gives no description here.
LowMalicious actor and zero emissions cause DoS in distributeAll()Fixed
The report gives no description here.
LowMissing storage __gap in Voter which is upgradeable contractFixed
The report gives no description here.
LowRewards can be distributed early with _distribute()Fixed
The report gives no description here.
LowRounding down in split() function causes dust token loss.Fixed
The report gives no description here.
LowSome contracts not following UUPS best practicesFixed
The report gives no description here.
Lowsplit assigns max lock time to child NFTs , possibly locking fundsFixed
The report gives no description here.
Lowsplit() function double-counts locks amounts in supplyFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of KittenSwap’s security record
KittenSwapSecurity firm
Pashov Audit Group86 projects reviewed · 165 reports · latest Aug 2026
See Pashov Audit Group’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us