Audit Report: Kalao Builder
Paladin reviewed Kalao (Audit Report: Kalao Builder) on 5 Apr 2022: 39 findings, 0 critical; 8 marked fixed, 31 acknowledged.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings39
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 5 | 0 |
| Medium | 0 | 3 | 0 |
| Low | 0 | 23 | 8 |
LowContract does not work with a fee-on-transfer rewardTokenFixed
The report gives no description here.
LowgetVestedAmount is identical to getTotalVestedFixed
The report gives no description here.
LowIn the case a rewardToken has a fee on transfer, the compound() / _compound function can prematurely drain the RewardDistributor contract of rewardTokensFixed
The report gives no description here.
LowrewardToken and rewardTracker can be made immutableFixed
The report gives no description here.
LowSafeMath double checksFixed
The report gives no description here.
LowStaking does not support fee-on-transfer tokensFixed
The report gives no description here.
LowUnused functionality: ReentrancyGuardFixed
The report gives no description here.
LowUnused variable: BASIS_POINTS_DIVISORFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Kalao’s security record
Security firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us