PoolTogether — Sushi and Yearn V2 Yield Sources
Consensys reviewed PoolTogether (PoolTogether — Sushi and Yearn V2 Yield Sources) on 1 May 2021: 8 findings, 1 critical; none marked fixed.
Report hosted on diligence.security.
Trustblock does not review code.
Findings8
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 1 | 0 | 0 |
| High | 1 | 0 | 0 |
| Medium | 2 | 0 | 0 |
| Low | 4 | 0 | 0 |
CriticalYearn: Re-entrancy attack during depositOpen
The report gives no description here.
HighYearn: Partial deposits are not processed properlyOpen
The report gives no description here.
MediumSushi: balanceOfToken underestimates balanceOpen
The report gives no description here.
MediumSushi: redeemToken redeems less than it shouldOpen
The report gives no description here.
LowSushi: Some state variables should be immutable and have more specific typesOpen
The report gives no description here.
LowSushi: Unnecessary balance queriesOpen
The report gives no description here.
LowSushi: Unnecessary function declaration in interfaceOpen
The report gives no description here.
LowYearn: Redundant approve callOpen
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (3)
- contracts/ISushi.sol
- contracts/SushiYieldSource.sol
- contracts/ISushiBar.sol
Part of PoolTogether’s security record
PoolTogetherSecurity firm
Consensys41 projects reviewed · 59 reports · latest Oct 2024
See Consensys’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us