Audit Report
Paladin reviewed PolyLime Finance (Audit Report) on 11 Nov 2021: 11 findings, 0 critical; all marked fixed.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings11
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 0 | 9 |
HighPossible integer overflow in mint require statement allows minting more than MAXCAPSUPPLYFixed
The report gives no description here.
Mediumpool.lpSupply is not modified by amount withdrawn in emergencyWithdrawFixed
The report gives no description here.
Lowdeposit and withdraw function calls will fail if the pending rewards to be minted causes the MAXCAP to exceed the max supplyFixed
The report gives no description here.
LowMAXCAP is private and cannot be read by other contracts such as the MasterchefFixed
The report gives no description here.
Lowmint function can be used to pre-mint large amounts of tokens before ownership is transferred to the MasterchefFixed
The report gives no description here.
Lowmsg.sender is unnecessarily cast to address(msg.sender)Fixed
The report gives no description here.
LowpayReferralCommission will fail if the pending commission to be minted causes the MAXCAP to exceed the maximum supplyFixed
The report gives no description here.
LowpendingLime will show inaccurate pending harvests on the dapp frontend if the pending rewards causes MAXCAP to be exceed MAXSUPPLYCAPFixed
The report gives no description here.
LowPool uses the contract balance to figure out the total depositsFixed
The report gives no description here.
LowReferral addresses for users without referral records can be arbitrarily set by operatorFixed
The report gives no description here.
Show 1 more
LowState variables initialized in the constructor and never modified can be set to immutableFixed
The report gives no description here.
Contracts in scope4
| Address | Chain | Source code |
|---|---|---|
| 0x4e4b149c226446f2d847a8809e7ec931e1a4dd6d | Chain: Polygon (POS) | Source code: Verified source |
| 0x95e0150d37a2b2f0d44ea0a0a0120a3aca69a41e | Chain: Polygon (POS) | Source code: Verified source |
| 0xfffb1781422cc18ab5786e3dbd55d7c91f9e5d9d | Chain: Polygon (POS) | Source code: Verified source |
| 0xe027ab31ea5568289c713ec6734b23e626ce4582 | Chain: Polygon (POS) | Source code: Verified source |
Part of PolyLime Finance’s security record
Security firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us