Catalyst security review

Pashov Audit GroupCode version: not recorded (see the report)

Audit · firm’s term: security review

Pashov Audit Group reviewed Catalyst (Catalyst security review) on 23 Dec 2023: 8 findings, 2 critical; all marked fixed.

2 critical findings, fixed
Open the reportOpen Catalyst’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings8

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical002
High000
Medium001
Low005
CriticalAttacker can drain all ETH from IPSeed due to malicious IIPSeedCurve implementationFixed

The report gives no description here.

CriticalAttacker can drain all ETH from IPSeed due to re-configuring tokenIdFixed

The report gives no description here.

Mediumburn() function doesn't have slippage controlFixed

The report gives no description here.

LowAdd sanity checks when set storage variablesFixed

The report gives no description here.

LowMalicious user can submit json injection in uri()Fixed

The report gives no description here.

LowMINIMUM_TRADE_SIZE value leakFixed

The report gives no description here.

LowSQRT OverflowFixed

The report gives no description here.

LowUser can accidentally burn his tokens instead of sellingFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Catalyst’s security record

Catalyst
Audits3 audits by 2 firmsLast audit Jun 2024, by Ackee Blockchain Security.
Critical findingsNo open critical findingsAcross the 3 reports, 4 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Catalyst’s security record

Security firm

Pashov Audit Group

30 projects reviewed · 53 reports · latest Jul 2026

See Pashov Audit Group’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us