Audit Report
Paladin reviewed FarmersOnly Layer 2 (Audit Report) on 2 Oct 2021: 17 findings, 0 critical; 16 acknowledged, 1 open.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings17
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 0 |
| Medium | 0 | 1 | 0 |
| Low | 0 | 15 | 0 |
MediumGov privilege: Harvest interval can be set up to 600 days preventing harvestsAcknowledged
The report gives no description here.
LowfarmersOnlyDev can be made constantAcknowledged
The report gives no description here.
LowGas Optimizations: Unnecessary usage of MAX_CAP variable to keep track of total supply since _totalSupply can be usedAcknowledged
The report gives no description here.
LowInternal canHarvest could break third party toolsAcknowledged
The report gives no description here.
LowLack of event for the withdraw functionAcknowledged
The report gives no description here.
Lowmint function can be used to pre-mint large amounts of tokens before ownership is transferred to the MasterchefAcknowledged
The report gives no description here.
LowpoolExistence mapping not actively used to prevent addition of the same lpToken twiceAcknowledged
The report gives no description here.
LowTypographical errors in event capitalizationAcknowledged
The report gives no description here.
LowUnecessary integer arithmetic within userPoolLockedAcknowledged
The report gives no description here.
LowunlockTimestamp can be made immutableAcknowledged
The report gives no description here.
Show 6 more
LowUnnecessary casting of msg.sender to addressAcknowledged
The report gives no description here.
LowUnsafe subtraction in deposit functionAcknowledged
The report gives no description here.
LowUnused variable endTimeAcknowledged
The report gives no description here.
LowupdateEmissionRate has no maximum safeguardAcknowledged
The report gives no description here.
LowUsage of implicit return variablesAcknowledged
The report gives no description here.
LowUsage of transfer in contrast to safeTransfer might prevent withdrawals on tokens which are not implemented correctlyAcknowledged
The report gives no description here.
Contracts in scope4
| Address | Chain | Source code |
|---|---|---|
| 0xafbd20b5e79fadbc0c0b9aba64cbb5d27d995bfd | Chain: Avalanche | Source code: Verified source |
| 0xfca54c64bc44ce2e72d621b6ed34981e53b66cae | Chain: Avalanche | Source code: Verified source |
| 0x27271ecd985f1b666e51209b033d93ddc5a36076 | Chain: Avalanche | Source code: Verified source |
| 0xc14bfa11c072d5e5735092cee376be905b9d7359 | Chain: Avalanche | Source code: Verified source |
Part of FarmersOnly Layer 2’s security record
Security firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us