PoolTogether - Pods

ConsensysFiles named in the report

Audit

Consensys reviewed PoolTogether (PoolTogether - Pods) on 1 Mar 2021: 10 findings, 4 critical; none marked fixed.

4 open critical findings
Open the reportOpen PoolTogether’s security record

Report hosted on diligence.security.

Trustblock does not review code.

Findings10

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical400
High100
Medium200
Low300
CriticalPod: Re-entrancy during deposit or withdrawal can lead to stealing fundsOpen

The report gives no description here.

CriticalToken transfers may return falseOpen

The report gives no description here.

CriticalTokenDrop: Unprotected initialize() functionOpen

The report gives no description here.

CriticalWinning pods can be frontrun with large depositsOpen

The report gives no description here.

HighTokenDrop: Re-entrancy in the claim function can cause to draining fundsOpen

The report gives no description here.

MediumPod: Fees are not limited by a user during the withdrawalOpen

The report gives no description here.

MediumPod: Having multiple token drops is inconsistentOpen

The report gives no description here.

LowPod.setManager() checks validity of wrong addressOpen

The report gives no description here.

LowProxyFactory.deployMinimal() does not check for contract creation failureOpen

The report gives no description here.

LowRename Withdrawl event to WithdrawalOpen

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (15)

  • coverage/lcov-report/contracts/TokenDrop.sol.html
  • coverage/contracts/TokenDrop.sol.html
  • coverage/contracts/IPod.sol.html
  • coverage/contracts/PodFactory.sol.html
  • coverage/lcov-report/contracts/TokenDropFactory.sol.html
  • coverage/contracts/TokenDropFactory.sol.html
  • contracts/TokenDrop.sol
  • contracts/IPod.sol
  • contracts/TokenDropFactory.sol
  • contracts/PodFactory.sol
  • coverage/lcov-report/contracts/PodFactory.sol.html
  • contracts/Pod.sol
  • coverage/lcov-report/contracts/Pod.sol.html
  • coverage/lcov-report/contracts/IPod.sol.html
  • coverage/contracts/Pod.sol.html

Part of PoolTogether’s security record

PoolTogether
Audits8 audits by 3 firmsLast audit May 2021, by Consensys.
Critical findings7 open critical findingsReported in 3 reports, the latest by Consensys, May 2021.
Open PoolTogether’s security record

Security firm

Consensys

41 projects reviewed · 59 reports · latest Oct 2024

See Consensys’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us