TopStrike security review
Audit · firm’s term: security review
Pashov Audit Group reviewed TopStrike (TopStrike security review) on 22 Dec 2025: 19 findings, 0 critical; 15 marked fixed, 4 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings19
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 3 |
| Low | 0 | 4 | 12 |
MediumMIN_NOTIONAL_WEI would DOS users sells in an edge caseFixed
The report gives no description here.
MediumMissing slippage protection in sell functionsFixed
The report gives no description here.
MediumUser balances partially non-withdrawable after LOT_SIZE_UNITS changesFixed
The report gives no description here.
LowBuy Price should be rounded upFixed
The report gives no description here.
LowETH sent when adding player without snipe is not refundedFixed
The report gives no description here.
LowInconsistent address validation in share transfer functionsFixed
The report gives no description here.
LowLOTS_PER_TX limits apply per function call, not per transactionFixed
The report gives no description here.
LowMalicious referrer can selectively block users from selling sharesFixed
The report gives no description here.
LowMIN_NOTIONAL_WEI check can be bypassed with buy price approximationFixed
The report gives no description here.
LowMIN_NOTIONAL_WEI check provides no additional safety and overlaps existing limitsFixed
The report gives no description here.
Show 5 more
LowMissing post-transfer minimum notional checkFixed
The report gives no description here.
LowTrading disabled in the first block after enabling when IPO is disabledFixed
The report gives no description here.
LowUnbounded ETH transfers enable gas griefing and denial-of-serviceFixed
The report gives no description here.
LowUsers can be locked from selling if trading parameters are increasedFixed
The report gives no description here.
LowUX related view functions are brokenFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of TopStrike’s security record
Security firm
Pashov Audit Group86 projects reviewed · 165 reports · latest Aug 2026
See Pashov Audit Group’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us