Audit Report
Paladin reviewed Utopia (Audit Report) on 5 Jan 2023: 28 findings, 0 critical; 24 marked fixed, 3 acknowledged, 1 open.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings28
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 6 |
| Low | 1 | 3 | 18 |
Medium_safeMint is vulnerable to reentrancy attacksFixed
The report gives no description here.
MediumGovernance priviledges: Recover functions can take assets from users if they give approval to the contractFixed
The report gives no description here.
MediumLack of validation in addPhase and editPhaseFixed
The report gives no description here.
MediumrefundIfOver may fail and prevent the purchase when the buyer is a contractFixed
The report gives no description here.
MediumThere is a risk that the ownership of the contract could be lost if a bot is used to call buyWithCreditCardFixed
The report gives no description here.
MediumWhitelist limitations can be bypassedFixed
The report gives no description here.
LowCode of the contract is not structuredFixed
The report gives no description here.
LowInheritance of ERC165 is redundantFixed
The report gives no description here.
LowLack of eventsFixed
The report gives no description here.
LowLack of eventsFixed
The report gives no description here.
Show 10 more
LowLack of validationFixed
The report gives no description here.
LowLength of the phasesInfo array is not accessible from the outsideFixed
The report gives no description here.
Lowmint lacks a reentrancy modifierFixed
The report gives no description here.
LowpriceFeed can be the zero addressFixed
The report gives no description here.
LowRedundant recoverERC721 functionFixed
The report gives no description here.
LowresetTokenRoyalty is marked as internal and will not be callable by the ownerFixed
The report gives no description here.
LowResults of the fund transfer to the treasury is not checkedFixed
The report gives no description here.
LowSafeMath is unnecessary from Solidity version 0.8 onwardsFixed
The report gives no description here.
LowsetEndURI and setBaseURI should only be called after minting is overFixed
The report gives no description here.
LowThe first NFT of the collection will not have its token URI changed on revealFixed
The report gives no description here.
Show 4 more
LowtokensOfOwner can run out of gasFixed
The report gives no description here.
LowtotalPrice is rounded downFixed
The report gives no description here.
LowUnnecessary use of ReentrancyGuardFixed
The report gives no description here.
LowUnused callerIsUser modifierFixed
The report gives no description here.
Contracts in scope2
| Address | Chain | Source code |
|---|---|---|
| 0x39c4b8e4bbda8185bfed497e73851bb176a8e497 | Chain: Ethereum | Source code: Verified source |
| 0x5f076e995290f3f9aea85fdd06d8fae118f2b75c | Chain: Ethereum | Source code: Verified source |
Part of Utopia’s security record
UtopiaSecurity firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us