Tradable Smart Contract Review
Audit · firm’s term: smart contract audit
Zokyo reviewed Tradable (Tradable Smart Contract Review) on 4 Sep 2023: 27 findings, 0 critical; 19 marked fixed, 8 open.
Trustblock does not review code.
Findings27
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 4 |
| Medium | 2 | 0 | 6 |
| Low | 5 | 0 | 9 |
HighLack of proper integration with Gelato relayFixed
The report gives no description here.
HighMethod withdrawalToAddressRequest and withdrawalToAddressRequestForUser do not send tokens to the `receiver` addressFixed
The report gives no description here.
HighMethods related to Staking on SideVault Contract encode incorrect staking/withdrawal methods for Base chainFixed
The report gives no description here.
HighUnsafe uint64 casting may overflowFixed
The report gives no description here.
MediumUntitled findingFixed
The report gives no description here.
MediumUntitled findingFixed
The report gives no description here.
MediumUntitled findingFixed
The report gives no description here.
MediumUntitled findingFixed
The report gives no description here.
MediumUntitled findingFixed
The report gives no description here.
MediumUntitled findingFixed
The report gives no description here.
Show 9 more
LowAdmin user can `unstake` without fulfilling the staking periodFixed
The report gives no description here.
LowDefault Decimal and protocolRewardPercentageDenominator can be set to `0`Fixed
The report gives no description here.
LowInconsistent coding pattern in Tradable SettingsFixed
The report gives no description here.
LowMissing zero address check for endpointFixed
The report gives no description here.
LowMissing zero amount and address checksFixed
The report gives no description here.
LowRedundant storage variable updateFixed
The report gives no description here.
LowThe zroPaymentAddress is hardcoded as a zero-addressFixed
The report gives no description here.
LowUnindexed events Or Missing eventsFixed
The report gives no description here.
LowUse of single step ownership transferFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (7)
- TradableSettings.sol
- TradableSideVault.sol
- TradableMarginHandler.sol
- TradableSettingsMessageAdapter.sol
- TradableStaking.sol
- StableToken.sol
- TradableMarginVault.sol
Part of Tradable’s security record
TradableSecurity firm
Zokyo89 projects reviewed · 131 reports · latest Feb 2025
See Zokyo’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us