ZPZcoin / EZPZ - ZPZ Protocol Smart Contracts
CredShields reviewed ZPZcoin / EZPZ - ZPZ Protocol Smart Contracts on 5 Oct 2026: 30 findings, 1 critical; all marked fixed.
Report hosted on GitHub.
Trustblock does not review code.
Findings38
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 5 |
| Medium | 0 | 0 | 13 |
| Low | 0 | 0 | 11 |
CriticalStake-and-unstake round trip mints freed sell creditFixed
The report gives no description here.
HighOne-token transfer enrolls any address as a protected sellerFixed
The report gives no description here.
HighProtected sellers dump the full balance through unregistered pairsFixed
The report gives no description here.
HighThe burn floor halts every burn and every buyback at launchFixed
The report gives no description here.
HighUnstake and restake each year restarts the 17 percent bandFixed
The report gives no description here.
HighVesting marks beneficiaries protected before any basis exists, freezing them entirelyFixed
The report gives no description here.
MediumA forfeited maturity bonus strands treasury capital in the shared poolFixed
The report gives no description here.
MediumA whitelisted recipient disables every sender-side transfer limitFixed
The report gives no description here.
MediumA whitelisted stake and exit cycle moves the reward treasury outFixed
The report gives no description here.
MediumAnti-bot limits throttle every staking payout and every pair buyFixed
The report gives no description here.
Show 10 more
MediumBuybacks are sandwichable in the default configurationFixed
The report gives no description here.
MediumOne deployer key holds every privileged role across all three contractsFixed
The report gives no description here.
MediumPermissionless checkpoint rolls let a caller choose the TWAP window on both oraclesFixed
The report gives no description here.
MediumRebinding the controller blocks every exit that carries creditFixed
The report gives no description here.
MediumSell ceilings recompute from a live basis while sold counters stay cumulativeFixed
The report gives no description here.
MediumThe buyback halt guard checks the wrong quantity, and the reserve locks at the floorFixed
The report gives no description here.
MediumThe launch-window cap counts protocol transfers as market salesFixed
The report gives no description here.
MediumThe token contract itself can be enrolled as a protected sellerFixed
The report gives no description here.
MediumThe vesting origin is caller-supplied and unbounded, so a schedule can be fully vested at creationFixed
The report gives no description here.
LowA protected wallet that stakes all its credit cannot move any tokenFixed
The report gives no description here.
Show 10 more
LowA whitelisted reward claim enrolls the claimer and freezes the walletFixed
The report gives no description here.
LowA whitelisted stake drains the shared reward poolFixed
The report gives no description here.
LowAn all-or-nothing maturity claim above the per-transfer ceiling locks the release permanentlyFixed
The report gives no description here.
LowProtection hooks fail open and pay out without sell capsFixed
The report gives no description here.
LowResetting the DEX launch time re-indexes every wallet's daily sell meterFixed
The report gives no description here.
LowSnapshot voting power outlives the stake entirelyFixed
The report gives no description here.
LowThe APY reserve rate ignores rewards claimed and staked again inside a yearFixed
The report gives no description here.
LowThe maturity release schedule is anchored in the pastFixed
The report gives no description here.
LowThe TWAP output floor ignores the pool's own price impactFixed
The report gives no description here.
LowThe whitelisted staking interval inverts and the program is unenterableFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of ZPZcoin / EZPZ - ZPZ Protocol Smart Contracts’s security record
ZPZcoin / EZPZ - ZPZ Protocol Smart ContractsSecurity firm
CredShields45 projects reviewed · 58 reports · latest Oct 2026
See CredShields’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us