Audit Report - Nitro & Presale
Paladin reviewed Camelot DEX (Audit Report - Nitro & Presale) on 14 Nov 2022: 19 findings, 0 critical; 17 marked fixed, 2 acknowledged.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings19
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 2 |
| Low | 0 | 2 | 14 |
High_harvest is flawed in several ways if a user withdraws before harvesting is allowedFixed
The report gives no description here.
MediumA malicious rewardsToken2 can be added after the pool is published, blocking rewards and forcing emergency withdrawalsFixed
The report gives no description here.
MediumonNFTHarvest might start reverting as it blindly attempts to forward the full amountsFixed
The report gives no description here.
LowaddRewards remains callable at the endTime while these rewards may not be claimableFixed
The report gives no description here.
LowAny xGrail reapproval attempt will fail and permanently prevent claiming on the contractFixed
The report gives no description here.
LowContract does not support deposit fee tokensFixed
The report gives no description here.
LowContract is not well suited for a create2 deployment patternFixed
The report gives no description here.
LowContract might not be compatible with all USDC deploymentsFixed
The report gives no description here.
LowemergencyWithdraw can still revert in the edge case that the rewardDebt calculation overflowsFixed
The report gives no description here.
LowGas optimizationFixed
The report gives no description here.
Show 7 more
LowisValidNFTPool will break if it is used on any pool other than msg.senderFixed
The report gives no description here.
LowLack of handling of ownership renunciationFixed
The report gives no description here.
LowLack of reentrancy guards on various functionsFixed
The report gives no description here.
LowLack of validationFixed
The report gives no description here.
LowTypographical errorsFixed
The report gives no description here.
LowTypographical errors and gas optimizationsFixed
The report gives no description here.
LowUsers will be unable to claim grail if their xGrail amount is zeroFixed
The report gives no description here.
Contracts in scope2
| Address | Chain | Source code |
|---|---|---|
| 0xe0a6b372ac6af4b37c7f3a989fe5d5b194c24569 | Chain: Arbitrum | Source code: Verified source |
| 0x66ec1ee6c3ad04d7629ce4a6d5d19ba99c365d29 | Chain: Arbitrum | Source code: Verified source |
Part of Camelot DEX’s security record
Camelot DEXSecurity firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us