Vanilla Contract
CertiK reviewed Vanilla (Vanilla Contract) on 2 Aug 2023: 22 findings, 0 critical; 17 marked fixed, 1 acknowledged, 4 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Findings22
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 4 | 0 | 17 |
Low`Ticket` should inherit from `ITicket`Open
The contract should inherit from the interface it implements.
LowLack of Size CheckOpen
The sizes of argument arrays are not compared. If one array will be longer than another, that will be unnoticed.
LowReturned values are not documentedOpen
`Loan.getAccountLiquidity()` returns three values: account total weight, account shortfall, and total weight of NFT tokens passed as arguments. However, the values are not documented and not named. `Loan.getAccountState()` returns 7 unnamed values.
LowThe purpose of `Vanilla.receiver` is unclearOpen
`Vanilla.receiver` seems to be unused by the existing code. It's purpose is unclear.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (42)
- contracts/Vanilla.sol
- contracts/interfaces/IVanilla.sol
- contracts/interfaces/chainlink/VRFV2WrapperInterface.sol
- contracts/libraries/BIT.sol
- contracts/Reinforcer.sol
- contracts/Vanilla721.sol
- contracts/interfaces/ITicket.sol
- contracts/RandomTable.sol
- contracts/interfaces/chainlink/LinkTokenInterface.sol
- contracts/interfaces/IERC20.sol
- contracts/interfaces/IERC721Receiver.sol
- contracts/libraries/ERC721Enumerable.sol
- contracts/interfaces/IRandomTable.sol
- contracts/interfaces/IERC721Enumerable.sol
- contracts/Locker.sol
- contracts/Admin.sol
- contracts/libraries/ERC20.sol
- contracts/interfaces/ILocker.sol
- contracts/Auction.sol
- contracts/interfaces/IERC721.sol
- contracts/interfaces/IInterestRate.sol
- contracts/libraries/Strings.sol
- contracts/libraries/ERC721.sol
- contracts/InterestRate.sol
- contracts/libraries/Address.sol
- contracts/Distributor.sol
- contracts/interfaces/IERC721Metadata.sol
- contracts/libraries/SafeERC20.sol
- contracts/Ticket.sol
- contracts/interfaces/ITreasury.sol
- contracts/Trader.sol
- contracts/Loan.sol
- contracts/interfaces/IVanilla721.sol
- contracts/libraries/ReentrancyGuard.sol
- contracts/libraries/ERC165.sol
- contracts/interfaces/IERC20Metadata.sol
- contracts/libraries/Context.sol
- contracts/interfaces/ILoan.sol
- contracts/interfaces/IWETH.sol
- contracts/libraries/chainlink/VRFV2WrapperConsumerBase.sol
- contracts/interfaces/IERC165.sol
- contracts/Treasury.sol
Part of Vanilla’s security record
Security firm
CertiK1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us