CertiK reviewed PartyFinance on 29 Mar 2022: 7 findings, 0 critical; 4 marked fixed, 3 acknowledged.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 2 | 1 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 1 | 3 |
All of the `SimpleToken` tokens are sent to the contract deployer when deploying the contract. This could be a centralization risk as the deployer can distribute `SimpleToken` tokens without obtaining the consensus of the community.
Function `swapTokens()` allows the contract owner to swap any supported token for any token, and a fee is collected during the process. While it is a common design to tax user behavior such as token transfer, the fee collection on an "onlyOwner" function seems a little unconventional. If called repeatedly, the function may allow contract owner to transfer most of the contract's token balance to fee-collecting address.
Addresses should be checked before assignment or external call to make sure they are not zero addresses. In contract `Party`, the following input addresses are not checked against zero address. - `PLATFORM_ADDRESS` in function `initialize()` - `mainToken` in function `initialize()` In contract `PartyFinance`, the following input addresses are not checked against zero address. - `_partyBeacon` in function `initialize()` - `PLATFORM_ADDRESS` in function `setPlatformAddress()`
Library `FeeManager` provides a function to calculate the fee according to fee rate, but it's not used within scope of this project. The code do not affect the functionality of the codebase and appear to be either leftovers from test code or older functionality.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (10)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us