PvP and Wheel

Paladin29 Oct 202420 addresses on 5 chains

Paladin reviewed BetSwirl (PvP and Wheel) on 29 Oct 2024: 19 findings, 0 critical; 11 marked fixed, 7 acknowledged, 1 open.

No open critical findings

Open the report Open BetSwirl’s security record

Report stored on IPFS. Content hash QmQXkiFaCzQ8SZVBpCKVDwCu8p7U6zDvfu9WokSSRjnYVG

Trustblock does not review code.

Findings19

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	1
Medium	0	1	3
Low	1	6	7

HighAnyone can join on a non-existing bet, which opens the door to multiple exploits of the systemFixed

The report gives no description here.

MediumAffiliates can front-run the call to _resolveBet to increase affiliate fees beyond what users specify as their acceptable upper limitFixed

The report gives no description here.

MediumBet creator can prevent bet finalization in some scenariosFixed

The report gives no description here.

MediumFunds can be donated to non-existing bet potsFixed

The report gives no description here.

Low0 value weight/multiplier configurations allow creating games that always loseFixed

The report gives no description here.

LowGas optimizationsFixed

The report gives no description here.

LowGas optimizationsFixed

The report gives no description here.

LowGas optimizationsFixed

The report gives no description here.

LowInsufficient validationFixed

The report gives no description here.

LowLack of enforcing a reasonable upper bound for startsAt can result in bets that might never be completedFixed

The report gives no description here.

Show 1 more

LowTypographical issuesFixed

The report gives no description here.

Contracts in scope20

Address	Chain	Source code
0xfcdda7a4437c2d69e33592582d3793626710070f	Chain: Base	Source code: Verified source
0xdec2a4f75c5fae4a09c83975681ce1dd1dff764b	Chain: Polygon (POS)	Source code: Verified source
0xf052ccc269e4c25cdf37232f95b31fe183cf4428	Chain: Arbitrum	Source code: Verified source
0xfcdda7a4437c2d69e33592582d3793626710070f	Chain: Arbitrum	Source code: Verified source
0xdec2a4f75c5fae4a09c83975681ce1dd1dff764b	Chain: Arbitrum	Source code: Verified source
0xdec2a4f75c5fae4a09c83975681ce1dd1dff764b	Chain: Avalanche	Source code: Verified source
0xa79fd774185b5f70e92dcc8f7437e106d648e17f	Chain: Arbitrum	Source code: Verified source
0xdec2a4f75c5fae4a09c83975681ce1dd1dff764b	Chain: Base	Source code: Verified source
0xfcdda7a4437c2d69e33592582d3793626710070f	Chain: Polygon (POS)	Source code: Verified source
0xf052ccc269e4c25cdf37232f95b31fe183cf4428	Chain: BNB Chain	Source code: Verified source

Show the other 10 addresses

Address	Chain	Source code
0xa79fd774185b5f70e92dcc8f7437e106d648e17f	Chain: Polygon (POS)	Source code: Verified source
0xa79fd774185b5f70e92dcc8f7437e106d648e17f	Chain: Base	Source code: Verified source
0xdec2a4f75c5fae4a09c83975681ce1dd1dff764b	Chain: BNB Chain	Source code: Verified source
0xa79fd774185b5f70e92dcc8f7437e106d648e17f	Chain: BNB Chain	Source code: Verified source
0xf052ccc269e4c25cdf37232f95b31fe183cf4428	Chain: Polygon (POS)	Source code: Verified source
0xf052ccc269e4c25cdf37232f95b31fe183cf4428	Chain: Base	Source code: Verified source
0xfcdda7a4437c2d69e33592582d3793626710070f	Chain: Avalanche	Source code: Verified source
0xa79fd774185b5f70e92dcc8f7437e106d648e17f	Chain: Avalanche	Source code: Verified source
0xfcdda7a4437c2d69e33592582d3793626710070f	Chain: BNB Chain	Source code: Verified source
0xf052ccc269e4c25cdf37232f95b31fe183cf4428	Chain: Avalanche	Source code: Verified source

Part of BetSwirl’s security record

BetSwirl

Audits4 audits by 2 firmsLast audit Dec 2024, by Paladin.

Critical findingsNo open critical findingsAcross 4 reports.

Open BetSwirl’s security record

Security firm

Paladin

176 projects reviewed · 241 reports · latest Apr 2025

See Paladin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.