Audit Report

Paladin8 Apr 20252 addresses on Avalanche

Paladin reviewed Pangolin (Audit Report) on 8 Apr 2025: 11 findings, 0 critical; 5 marked fixed, 6 acknowledged.

No open critical findings

Open the report Open Pangolin’s security record

Report hosted on paladinsec.co.

Trustblock does not review code.

Findings11

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	2
Medium	0	2	1
Low	0	4	2

HighChanging the tickSpacing when the fee for a pool is changed will break core invariants, and can lead to lost fundsFixed

The report gives no description here.

HighNo limitations placed on altering the fees of any poolFixed

The report gives no description here.

MediumUsers who mint() a new position and never alter their liquidity will never receive any token rewardsFixed

The report gives no description here.

LowLack of an external function to trigger _updateReward() without altering liquidityFixed

The report gives no description here.

LowsetFee does not check that tickSpacing is registered in the factoryFixed

The report gives no description here.

Contracts in scope2

Address	Chain	Source code
0xf40937279f38d0c1f97afa5919f1cb3cb7f06a7f	Chain: Avalanche	Source code: Verified source
0x1128f23d0bc0a8396e9fbc3c0c68f5ea228b8256	Chain: Avalanche	Source code: Verified source

Part of Pangolin’s security record

Pangolin

Audits1 audit by 1 firmLast audit Apr 2025, by Paladin.

Critical findingsNo open critical findingsIn 1 report.

Open Pangolin’s security record

Security firm

Paladin

176 projects reviewed · 241 reports · latest Apr 2025

See Paladin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.