Audit Report
Paladin reviewed Degen Dojo (Audit Report) on 1 Feb 2022: 33 findings, 0 critical; 30 marked fixed, 3 open.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings33
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 2 |
| Medium | 0 | 0 | 2 |
| Low | 3 | 0 | 26 |
HighAn exploiter can frontrun Chainlink fulfillments to always let small trades winFixed
The report gives no description here.
HighThe governance claim function does not set jackpotPaidFixed
The report gives no description here.
MediumBalance will almost never be zero because it includes msg.valueFixed
The report gives no description here.
MediumUsage of tx.origin for key business logic is prone to phishingFixed
The report gives no description here.
LowcollectFees is vulnerable to sandwich attacksFixed
The report gives no description here.
LowConstructor variables can be made IERC20 and IUniswapV2Router02Fixed
The report gives no description here.
LowContracts cannot execute the enter function but they can still execute transfer and transferFromFixed
The report gives no description here.
LowContracts cannot execute the enter function but they can still execute transfer and transferFromFixed
The report gives no description here.
LowDivision before multiplication is done which could cause excessive rounding within getMinimumTradeSizeFixed
The report gives no description here.
Lowenter, leave and getValue can be made externalFixed
The report gives no description here.
Show 10 more
LowethUsdPriceFeed and linkUsdPriceFeed can be made immutableFixed
The report gives no description here.
LowGas optimization: Swap deadline does not need to be higher than block.timestampFixed
The report gives no description here.
LowgetMinimumTradeSize lacks safeguards for several edge casesFixed
The report gives no description here.
LowgetRatio is impreciseFixed
The report gives no description here.
LowgetValue is imprecise and can revert because of division by zeroFixed
The report gives no description here.
LowInconsistent usage of uint256Fixed
The report gives no description here.
LowJackpot mechanism does not adhere to VRF requirementsFixed
The report gives no description here.
LowLack of events for several functionsFixed
The report gives no description here.
LowLack of parameter validationFixed
The report gives no description here.
Lowrouter can be made immutableFixed
The report gives no description here.
Show 10 more
LowSeveral functions can be made externalFixed
The report gives no description here.
LowSeveral functions can be made externalFixed
The report gives no description here.
LowSeveral variables are privateFixed
The report gives no description here.
LowTrade size check does not allow trades of the minimum or maximum trade sizeFixed
The report gives no description here.
Lowtreasury and bar are privateFixed
The report gives no description here.
Lowtreasury can be made immutableFixed
The report gives no description here.
LowTypographic errors: xDojiFixed
The report gives no description here.
LowTypographical errorsFixed
The report gives no description here.
LowUnnecessary bracket useFixed
The report gives no description here.
LowUnused variable: amountOutFixed
The report gives no description here.
Contracts in scope4
| Address | Chain | Source code |
|---|---|---|
| 0x7c82706ef543dc969dd53e8e263ceb6fc0efe191 | Chain: BNB Chain | Source code: Verified source |
| 0xbece7edddd7ab1b7cfd6c93703c3e34c7182b33e | Chain: BNB Chain | Source code: Verified source |
| 0x790ce67ec6b53dc9f18284f133d27a1c51c1cbbf | Chain: BNB Chain | Source code: Verified source |
| 0x258bb545c2a58882a3b1d1c83ef667f3cbc2dd1c | Chain: BNB Chain | Source code: Verified source |
Part of Degen Dojo’s security record
Security firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us