For Colony (Token & Staking)
Paladin reviewed COLONY (For Colony (Token & Staking)) on 26 Feb 2024: 22 findings, 0 critical; 12 marked fixed, 9 acknowledged, 1 open.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings22
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 4 | 1 |
| Medium | 0 | 2 | 2 |
| Low | 1 | 3 | 9 |
HighaddReward and addCustomReward allow the transfer of tokens in from any arbitrary addressFixed
The report gives no description here.
MediumIncorrect migration will result in permanently stuck fundsFixed
The report gives no description here.
MediumUsers can backrun initialization and stake without paying a feeFixed
The report gives no description here.
LowAVAX transfer will not work for contracts without fallback functionFixed
The report gives no description here.
LowclaimableReward only accounts for one categoryFixed
The report gives no description here.
LowGas optimizationsFixed
The report gives no description here.
LowLarge amount of reward data can result in DoSFixed
The report gives no description here.
LowLoop will not revert if desired data is not matchedFixed
The report gives no description here.
LowMultiplier for reward calculation might be insufficientFixed
The report gives no description here.
LowTypographical issuesFixed
The report gives no description here.
Show 2 more
LowTypographical IssuesFixed
The report gives no description here.
LowViolation of checks-effects-interactions patternFixed
The report gives no description here.
Contracts in scope4
| Address | Chain | Source code |
|---|---|---|
| 0x2b8c3c4d13142d7457dc80c92db4c62f3543751c | Chain: Avalanche | Source code: Verified source |
| 0x62685d3eaace96d6145d35f3b7540d35f482de5b | Chain: Avalanche | Source code: Verified source |
| 0x5424f5896d80a4f333b35980d15856a34e43e32c | Chain: Avalanche | Source code: Verified source |
| 0xad25c722994cdabfe40f34548dfa1b0ee14e1262 | Chain: Avalanche |
Part of COLONY’s security record
COLONYSecurity firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us