Looty Audit

Paladin2 addresses on Avalanche

Paladin reviewed Looty (Looty Audit) on 9 May 2024: 33 findings, 0 critical; 17 marked fixed, 14 acknowledged, 2 open.

No open critical findings
Open the reportOpen Looty’s security record

Report hosted on paladinsec.co.

Trustblock does not review code.

Findings33

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High033
Medium0311
Low283
HighGovernance privilegesAcknowledged

The report gives no description here.

HighIf a randomly selected pool has ran out of rewards, it defaults to the next smallest indexed pool with rewardsAcknowledged

The report gives no description here.

HighSome keyTypes might not have rewards associatedAcknowledged

The report gives no description here.

MediumsetMintConfiguration does not work as expectedAcknowledged

The report gives no description here.

MediumThe withdraw/recover functions will not work with multi- signature contractsAcknowledged

The report gives no description here.

MediumUsers can frontrun the Chainlink responseAcknowledged

The report gives no description here.

LowGas optimizationsAcknowledged

The report gives no description here.

LowMissing guard on editConfigurationAcknowledged

The report gives no description here.

LowRequest confirmations on Chainlink should be increasedAcknowledged

The report gives no description here.

LowrewardsDst cannot be changedAcknowledged

The report gives no description here.

Show 4 more
LowSeveral view functions can run out of gasAcknowledged

The report gives no description here.

LowThe contract does not work with tokens with a fee on transfer or rebase tokensAcknowledged

The report gives no description here.

LowTypographical issuesAcknowledged

The report gives no description here.

LowTypographical issuesAcknowledged

The report gives no description here.

Contracts in scope2

AddressChainSource code
0x39fb5b7069658045225ea0c86aa68621eecb4887Chain: AvalancheSource code: Verified source
0x7a4d84a2ee5323d7de5691b2fb23c7b700f6084dChain: AvalancheSource code: Verified source

Part of Looty’s security record

Looty
Audits1 audit by 1 firmLast audit May 2024, by Paladin.
Critical findingsNo open critical findingsIn 1 report.
Open Looty’s security record

Security firm

Paladin

176 projects reviewed · 241 reports · latest Apr 2025

See Paladin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us