PAAL AI - Audit

CertiK2 addresses on Ethereum and Base

CertiK reviewed PAAL AI (PAAL AI - Audit) on 4 Apr 2024: 9 findings, 0 critical; 6 marked fixed, 1 acknowledged, 2 open.

No open critical findings
Open the reportOpen PAAL AI’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High010
Medium003
Low203
LowOut of Scope Dependency "amountOutMin"Open

The variable "amountOutMin" is used to determine the minimal amount of tokens as the result of the swap. If the value passed into the swap function is miscalculated, the swap operation could be vulnerable to front-running or sandwich attacks. The scope of the review treats the calculation of "amountOutMin" as a black box and assumes its correct calculation.

LowThird-Party Dependency UsageOpen

The contract is serving as the underlying entity to interact with one or more third party protocols. The scope of the audit treats third party entities as black boxes and assumes their functional correctness. However, in the real world, third parties can be compromised and this may lead to lost or stolen assets. In addition, upgrades of third parties can possibly create severe impacts, such as increasing fees of third parties, migrating to new LP pools, etc. ```solidity=17 IUniswapV2Router02 public router; ``` - The contract `PaalXSwapContract` interacts with third party contract with `IUniswapV2Router02` interface via `router`.

Contracts in scope2

AddressChainSource code
0xe7373fdae34951426a579455ca24d7388a12a172Chain: EthereumSource code: Verified source
0xd2326e0b4ad26432da0eb94dc7890770ac11a8bcChain: BaseSource code: Verified source

Part of PAAL AI’s security record

PAAL AI
Audits1 audit by 1 firmLast audit Apr 2024, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open PAAL AI’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us