KittenSwap security review
Audit · firm’s term: security review
Pashov Audit Group reviewed KittenSwap (KittenSwap security review) on 22 May 2025: 55 findings, 2 critical; 36 marked fixed, 19 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings55
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 0 | 7 |
| Medium | 0 | 3 | 13 |
| Low | 0 | 16 | 14 |
MediumAmbiguous condition in fee handling for bribe rewardsAcknowledged
The report gives no description here.
MediumDouble reward claim in ExternalBribeAcknowledged
The report gives no description here.
MediumInconsistent VotingEscrow implementation in balanceOfNFT() methodsAcknowledged
The report gives no description here.
LowDust losses in notifyRewardAmountAcknowledged
The report gives no description here.
LowFee-on-transfer token incompatibilityAcknowledged
The report gives no description here.
LowHardcoded gas in ClFactory's getSwapFee and getUnstakedFee can cause issuesAcknowledged
The report gives no description here.
LowInaccuracy in Voter contract reward distribution mechanismAcknowledged
The report gives no description here.
LowInaccurate reward calculation in ExternalBribe contractAcknowledged
The report gives no description here.
LowInadequate reward validation in ClGauge contractAcknowledged
The report gives no description here.
LowInconsistent restriction on increase_amount and deposit_forAcknowledged
The report gives no description here.
Show 9 more
LowIncorrect logic and documentation in balance retrievalAcknowledged
The report gives no description here.
LowLack of a _poolVote length check inside Voter.vote could cause issuesAcknowledged
The report gives no description here.
LowPotential out of gas risk in reward distribution checkpoint traversalAcknowledged
The report gives no description here.
LowRedundant logic in getEpochStart() of ExternalBribeAcknowledged
The report gives no description here.
LowRewards lost until Gauge or Bribe deposits are nonzeroAcknowledged
The report gives no description here.
LowUsers lose rewards if they call getReward exactly at epoch endAcknowledged
The report gives no description here.
LowVoter.updateForRange could revert if end value is invalidAcknowledged
The report gives no description here.
LowVoting restriction possible after resetting in reset()Acknowledged
The report gives no description here.
LowVotingEscrow.totalSupplyAtT is not working properlyAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of KittenSwap’s security record
KittenSwapSecurity firm
Pashov Audit Group86 projects reviewed · 165 reports · latest Aug 2026
See Pashov Audit Group’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us