Penpie Smart Contract Review
Zokyo reviewed Magpie XYZ (Penpie Smart Contract Review) on 22 Jun 2023: 24 findings, 0 critical; 16 marked fixed, 8 open.
Trustblock does not review code.
Findings24
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 1 |
| Medium | 0 | 0 | 0 |
| Low | 7 | 0 | 15 |
HighLack of access control in increaseLockTime function enables unauthorized position lockOpen
The report gives no description here.
LowMethod convert(...) does not validate parameter `_mode`Open
The report gives no description here.
LowMissing check for the `newMinter` parameter if it’s an EOAOpen
The report gives no description here.
LowMissing events in methods called only by Operator and AdminOpen
The report gives no description here.
LowMissing initialization of PausableUpgradeable ContractOpen
The report gives no description here.
LowUnbounded iteration in massUpdatePools function (MasterPenPie.sol)Open
The report gives no description here.
LowUnlimited emission rate can be set for penPiePerSecOpen
The report gives no description here.
LowUpgradeable contracts not using upgradeable smart contract librariesOpen
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (6)
- MasterPenpie.sol
- PendleMarketDepositHelper.sol
- PendleStaking.sol
- mPendleConvertor.sol
- PenpieReceiptToken.sol
- mPendleOFT.sol
Part of Magpie XYZ’s security record
Magpie XYZSecurity firm
Zokyo89 projects reviewed · 131 reports · latest Feb 2025
See Zokyo’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us