Plume
Trail of Bits reviewed Plume on 1 Nov 2024: 6 findings, 0 critical; all marked fixed.
No open critical findings
Findings6
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 2 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 0 | 3 |
HighAnyone can execute arbitrary calls from a smart contract walletFixed
The report gives no description here.
HighAssetToken’s transfer always revertsFixed
The report gives no description here.
MediumYield beneficiary can temporarily DoS the giver for a specific token through acceptYieldAllowance functionFixed
The report gives no description here.
LowacceptYieldAllowance does not check that the amount is actually availableFixed
The report gives no description here.
LowClaimedYield considers only currently whitelisted usersFixed
The report gives no description here.
LowCodeSize and CodeCopy does not behave as if no code is present for EOAFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Plume’s security record
Plume
Audits1 audit by 1 firmLast audit Nov 2024, by Trail of Bits.
Critical findingsNo open critical findingsIn 1 report.
Open Plume’s security recordSecurity firm
Trail of Bits7 projects reviewed · 7 reports · latest Jan 2025
See Trail of Bits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us