PoolTogether: The Prize Layer for DeFi audit
Audit competition · firm’s term: public contest
Sherlock reviewed PoolTogether (PoolTogether: The Prize Layer for DeFi audit) on 6 Jun 2024: 22 findings, 0 critical; 14 marked fixed, 8 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings22
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 3 |
| Medium | 0 | 8 | 11 |
| Low | 0 | 0 | 0 |
MediumClaimers can receive less feePerClaim than they should if some prizes are already claimed or if reverts because of a reverting hookAcknowledged
The report gives no description here.
MediumEstimated prize draws in TieredLiquidityDistributor are off due to rounding down when calculating the sum, leading to incorrect prizesAcknowledged
The report gives no description here.
MediumPrice formula in TpdaLiquidationPair._computePrice() does not account for a jump in liquidatable balanceAcknowledged
The report gives no description here.
MediumPUSH0 opcode Is Not Supported on Linea yetAcknowledged
The report gives no description here.
MediumThe RNG finish draw auction rewards are overpaid due to missing to account for the time it takes to fulfill the Witnet randomness requestAcknowledged
The report gives no description here.
MediumTpdaLiquidationPair.swapExactAmountOut() can be DOSed by a vault's mint limitAcknowledged
The report gives no description here.
MediumUsers can setup hooks to control the expannsion of tiersAcknowledged
The report gives no description here.
MediumWitnet is not available on some networks listedAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of PoolTogether’s security record
PoolTogetherSecurity firm
Sherlock46 projects reviewed · 67 reports · latest Sep 2026
See Sherlock’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us