Farm Audit Report
Paladin reviewed Timeleap Finance (Farm Audit Report) on 29 Jul 2021: 16 findings, 0 critical; 5 marked fixed, 11 acknowledged.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings16
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 2 | 1 |
| Medium | 0 | 1 | 2 |
| Low | 0 | 8 | 2 |
HighSeverely excessive rewards issue when a token with a transfer tax is addedAcknowledged
The report gives no description here.
HighupdateStartBlock does not update PoolInfo.lastRewardBlockAcknowledged
The report gives no description here.
MediumRewards may be incorrectly calculated when new pools are added, or allocPoints changed in setAcknowledged
The report gives no description here.
LowAdding an EOA or a non-token contract as a pool will break updatePool, massUpdatePools and updateEmissionRateAcknowledged
The report gives no description here.
LowdelegateBySig can be frontrun and cause denial of serviceAcknowledged
The report gives no description here.
LowfinalMint can be made externalAcknowledged
The report gives no description here.
LowLack of events for add, set, finalMint and updateStartBlockAcknowledged
The report gives no description here.
LowPools use the contract balance to figure out the total depositsAcknowledged
The report gives no description here.
LowRounding errors may be present in depositfeeBP calculations.Acknowledged
The report gives no description here.
LowsetMaxSupply event is redundantAcknowledged
The report gives no description here.
Show 1 more
LowThe pendingTime function will revert if totalAllocPoint is zeroAcknowledged
The report gives no description here.
Contracts in scope4
| Address | Chain | Source code |
|---|---|---|
| 0x02e6aed3d464490b39295626a39bffda17d679a9 | Chain: Polygon (POS) | Source code: Verified source |
| 0x5c59d7cb794471a9633391c4927ade06b8787a90 | Chain: Polygon (POS) | Source code: Verified source |
| 0x0bd5d1f205c593f4587f54b131ef86b1b026976d | Chain: Polygon (POS) | |
| 0x41c4dfa389e8c43ba6220aa62021ed246d441306 | Chain: Polygon (POS) | Source code: Verified source |
Part of Timeleap Finance’s security record
Security firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us