MBD Financials (Token)
Paladin reviewed MBD Financials (MBD Financials (Token)) on 24 Apr 2024: 34 findings, 0 critical; 29 marked fixed, 4 acknowledged, 1 open.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings34
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 2 | 13 |
| Medium | 0 | 0 | 8 |
| Low | 1 | 2 | 8 |
High_approve erroneously sets the approve amount to the owner of the contractFixed
The report gives no description here.
HighA new proposal will always overwrite the first proposalFixed
The report gives no description here.
HighA user can vote multiple times on the same proposalFixed
The report gives no description here.
HighAll proposals will succeedFixed
The report gives no description here.
HighDEFAULT_ADMIN_ROLE is not set to any addressFixed
The report gives no description here.
HighETH dust can accumulate after adding liquidityFixed
The report gives no description here.
HighImpossible to add a proposal if the user has enough votes to pass itFixed
The report gives no description here.
HighIncorrectly implemented liquidity calculation on _takeLiquidityFixed
The report gives no description here.
HighIncorrectly implemented swap of liquidityFixed
The report gives no description here.
HighSubmitting/voting on a proposal is brokenFixed
The report gives no description here.
Show 10 more
HighSybil attack is possible on votingFixed
The report gives no description here.
HighThe SetValue event is missingFixed
The report gives no description here.
HighVotes can be submitted to expired or passed proposalsFixed
The report gives no description here.
Medium_maxTxAmount is set incorrectly and has no upper limitFixed
The report gives no description here.
MediumincludeInReward causes a previously excluded address to gain rewardsFixed
The report gives no description here.
MediumLack of boundary limit checks for maxTxPercentFixed
The report gives no description here.
MediumNot all ERC20 tokens can be withdrawnFixed
The report gives no description here.
MediumnumTokensSellToAddToLiquidity is not modifiableFixed
The report gives no description here.
MediumSubmitter of a proposal can freely choose the proposal durationFixed
The report gives no description here.
MediumThe _gap variable is missing from the upgradable contractFixed
The report gives no description here.
Show 9 more
MediumThe function to burn _tTotal is incorrectly implementedFixed
The report gives no description here.
Low_maxTxAmount is not updated after burnFixed
The report gives no description here.
LowincreaseAllowance/decreaseAllowance are obsoleteFixed
The report gives no description here.
LowIncreasing the _excluded array can DoS the contractFixed
The report gives no description here.
LowLack of events for several functionsFixed
The report gives no description here.
LowSeveral variables are privateFixed
The report gives no description here.
LowThe VotesSubmitted event is emitted twiceFixed
The report gives no description here.
LowTypographical issuesFixed
The report gives no description here.
LowUsing block.timestamp as the deadline is equivalent to not having a deadlineFixed
The report gives no description here.
Contracts in scope1
| Address | Chain | Source code |
|---|---|---|
| 0x4ff319847664b03a956d8f4f076a35ec2d4a6f46 | Chain: Ethereum | Source code: Verified source |
Part of MBD Financials’s security record
MBD FinancialsSecurity firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us