Good Ghosting Core Files Audit
Audit · firm’s term: audit
Quantstamp reviewed Good Ghosting Core Files Audit on 12 Aug 2021: 4 findings, 0 critical; 2 marked fixed, 1 acknowledged, 1 open.
Report hosted on certificate.quantstamp.com.
Trustblock does not review code.
Findings4
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 1 | 1 | 2 |
LowMissing input checksFixed
Should check: 0. `contracts\GoodGhosting.sol::constructor`: if `_segmentLength` is not zero. 0. `contracts\GoodGhosting.sol::constructor`: if `_inboundCurrency` is not zero. 0. `contracts\GoodGhosting.sol::constructor`: if `_lendingPoolAddressProvider` is not zero. 0. `contracts\GoodGhosting.sol::constructor`: if `_dataProvider` is not zero. 0. `contracts\GoodGhostingPolygon.sol::constructor`: if `_incentiveController` is not zero. 0. `contracts\GoodGhostingPolygon.sol::constructor`: if `_matic` is not zero.
LowUnlimited allowance for external contractFixed
In `contracts\GoodGhosting.sol::constructor`: the allowance of `lendingPool` for spending `_inboundCurrency` that is held by `contracts\GoodGhosting.sol` is set to a very large number. This could be used by `lendingPool` to drain the contract, whenever the `lendingPool` becomes malicious, or being controlled by malicious users.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (4)
- _audited/MerkleDistributor.sol
- _audited/GoodGhostingPolygon.sol
- _audited/GoodGhostingPolygonWhitelisted.sol
- _audited/GoodGhosting.sol
Part of Good Ghosting Core Files Audit’s security record
Security firm
Quantstamp236 projects reviewed · 332 reports · latest Oct 2026
See Quantstamp’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us