PartyFinance

CertiKFiles named in the report

CertiK reviewed PartyFinance on 29 Mar 2022: 7 findings, 0 critical; 4 marked fixed, 3 acknowledged.

No open critical findings
Open the reportOpen PartyFinance’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High021
Medium000
Low013
HighInitial Token DistributionFixed

All of the `SimpleToken` tokens are sent to the contract deployer when deploying the contract. This could be a centralization risk as the deployer can distribute `SimpleToken` tokens without obtaining the consensus of the community.

LowFee Collection in `onlyOwner` FunctionFixed

Function `swapTokens()` allows the contract owner to swap any supported token for any token, and a fee is collected during the process. While it is a common design to tax user behavior such as token transfer, the fee collection on an "onlyOwner" function seems a little unconventional. If called repeatedly, the function may allow contract owner to transfer most of the contract's token balance to fee-collecting address.

LowMissing Zero Address ValidationFixed

Addresses should be checked before assignment or external call to make sure they are not zero addresses. In contract `Party`, the following input addresses are not checked against zero address. - `PLATFORM_ADDRESS` in function `initialize()` - `mainToken` in function `initialize()` In contract `PartyFinance`, the following input addresses are not checked against zero address. - `_partyBeacon` in function `initialize()` - `PLATFORM_ADDRESS` in function `setPlatformAddress()`

LowRedundant StatementsFixed

Library `FeeManager` provides a function to calculate the fee according to fee rate, but it's not used within scope of this project. The code do not affect the functionality of the codebase and appear to be either leftovers from test code or older functionality.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (10)

  • contracts/SimpleToken.sol
  • contracts/libraries/JoinRequests.sol
  • contracts/libraries/Announcements.sol
  • contracts/libraries/SignatureHelpers.sol
  • contracts/PartyFactory.sol
  • contracts/Party.sol
  • contracts/PartyStorage.sol
  • contracts/libraries/SharedStructs.sol
  • contracts/libraries/FeeManager.sol
  • contracts/PartyInitializable.sol

Part of PartyFinance’s security record

PartyFinance
Audits1 audit by 1 firmLast audit Mar 2022, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open PartyFinance’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us