Base Paper Scissors / Contract & Token

Hacken10 Jul 2024Files named in the report

Hacken reviewed Base Paper Scissors (Base Paper Scissors / Contract & Token) on 10 Jul 2024: 19 findings, 2 critical; 17 marked fixed, 2 open.

2 critical findings, fixed

Open the report Open Base Paper Scissors’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings19

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	2
High	1	0	2
Medium	1	0	1
Low	0	0	12

CriticalBlockPaperScissors Vulnerability Allows Attackers to Double Winning ChancesFixed

The report gives no description here.

CriticalLack of Cancellation Status Update in cancelGame() FunctionFixed

The report gives no description here.

HighLack of Minimum Stake Amount and Loop Over stakers AddressSet Enables Permanent DoS AttackFixed

The report gives no description here.

HighMissed Edge-Case in BlockPaperScissors Allows To Drain Native Tokens From ContractFixed

The report gives no description here.

MediumMissed Edge-Case in BlockPaperScissors Enables Unfair WinFixed

The report gives no description here.

LowAssignment of Default Value to Variables Increases Gas ConsumptionFixed

The report gives no description here.

LowContract Owner Can Collect tempRewardBalance in Reward DistributionFixed

The report gives no description here.

LowDuplicate Functionality in BlockPaperScissorsTokenERC20 Contract Leads to Higher Deployment CostFixed

The report gives no description here.

LowFloating PragmaFixed

The report gives no description here.

LowGas Inefficiency Due to Missing Usage of Solidity Custom ErrorsFixed

The report gives no description here.

Show 7 more

LowInsufficient Validation in BlockPaperScissors Contract Setter FunctionsFixed

The report gives no description here.

LowMissing Checks for Zero AddressFixed

The report gives no description here.

LowMissing Events For Critical ActionsFixed

The report gives no description here.

LowMissing Two-step Ownership Transfer ProcessFixed

The report gives no description here.

LowReadability Improvement For Long LiteralsFixed

The report gives no description here.

LowRedundant and Unused ImportsFixed

The report gives no description here.

LowRedundant State Variable Getters in SolidityFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (2)

contracts/BlockPaperScissors.sol
contracts/BlockPaperScissorsTokenERC20.sol

Part of Base Paper Scissors’s security record

Base Paper Scissors

Audits1 audit by 1 firmLast audit Jul 2024, by Hacken.

Critical findingsNo open critical findingsIn that report, 2 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Base Paper Scissors’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.