NFT Marketplace Audit Report
Paladin reviewed Yeti Swap (NFT Marketplace Audit Report) on 2 Sep 2021: 11 findings, 0 critical; 9 marked fixed, 2 acknowledged.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings11
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 2 | 7 |
HighLack of validation on commission rates allows the marketplace owner to claim all NFTs for saleFixed
The report gives no description here.
MediumPurchases will revert if comissionTaker is set to the zero addressFixed
The report gives no description here.
LowbaseToken and yetiswapNFT can be made immutableFixed
The report gives no description here.
LowgetWhitelistedCollection, getWhitelistedToken, addWhitelistedCollection, removeWhitelistedCollection, addWhitelistedToken, removeWhitelistedToken andFixed
The report gives no description here.
LowInconsistent usage of SafeMath in incrementingFixed
The report gives no description here.
LowLack of events for setComissionRate, setComissionRateAvax, setComissionTaker, addNewCategory, addWhitelistedCollection, removeWhitlistedCollection,Fixed
The report gives no description here.
LowRequiring a non-negative number to be greater or equal to zero is futileFixed
The report gives no description here.
LowThe yetiswapNFT should not be addable to the whitelistFixed
The report gives no description here.
LowTypographical errors in error messages and variablesFixed
The report gives no description here.
Contracts in scope1
| Address | Chain |
|---|---|
| 0x14390f57ccfdb45f969381e7e107acf062d3a592 | Chain: Avalanche |
Part of Yeti Swap’s security record
Yeti SwapSecurity firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us