Penpie Smart Contract Review
Zokyo reviewed Magpie XYZ (Penpie Smart Contract Review) on 22 Jun 2023: 24 findings, 0 critical; 16 marked fixed, 8 open.
Trustblock does not review code.
Findings24
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 1 |
| Medium | 0 | 0 | 0 |
| Low | 7 | 0 | 15 |
HighExecution flow in _onlyWhiteListed modifier leaves modified function unexecutedFixed
The report gives no description here.
LowLack of Input Validation in addBonusRewardForAsset functionFixed
The report gives no description here.
LowMissing initialization of Reentrancy Guard Upgradeable ContractFixed
The report gives no description here.
LowMissing length check for rewarders array in harvestVePendleReward functionFixed
The report gives no description here.
LowMissing Reentrancy checks in internal methodsFixed
The report gives no description here.
LowMissing Reentrancy modifier in depositVlPenPieFor(...) and withdrawVlPenPierFor(...) methodsFixed
The report gives no description here.
LowRedundant use of `this` keyword in the function invocationsFixed
The report gives no description here.
LowReuse code by adding a modifierFixed
The report gives no description here.
LowUnrestricted Reactivation of Markets with Null Rewarder Address in PendleMarketDepositHelper ContractFixed
The report gives no description here.
LowUnused imports, events, custom errors and modifiersFixed
The report gives no description here.
Show 6 more
LowUnused removePoolInfo function in PendleStaking contractFixed
The report gives no description here.
LowUnutilized bonus reward tokens functionalityFixed
The report gives no description here.
LowUpgradeable contracts missing method to disable initializers for implementation contractsFixed
The report gives no description here.
LowUse specific Solidity compiler versionFixed
The report gives no description here.
LowWrong NatSpec comments.Fixed
The report gives no description here.
LowZero address validation missing for setPendleStakingFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (6)
- MasterPenpie.sol
- PendleMarketDepositHelper.sol
- PendleStaking.sol
- mPendleConvertor.sol
- PenpieReceiptToken.sol
- mPendleOFT.sol
Part of Magpie XYZ’s security record
Magpie XYZSecurity firm
Zokyo89 projects reviewed · 131 reports · latest Feb 2025
See Zokyo’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us