Xyro
Audit · firm’s term: smart contract review
Zokyo reviewed XYRO on 30 Aug 2024: 38 findings, 6 critical; 32 marked fixed, 6 acknowledged.
1 critical acknowledged, not fixed
Open the reportOpen XYRO’s security record
Report stored on IPFS. Content hash QmZWYs4FHEQsbMTfC91CyJNsENqU7aMhgiu9J6hZPW4EYH
Trustblock does not review code.
Findings38
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 1 | 5 |
| High | 0 | 0 | 4 |
| Medium | 0 | 2 | 9 |
| Low | 0 | 3 | 14 |
CriticalUsers will lose their funds if enough players take place in a game due to push patternAcknowledged
The report gives no description here.
MediumGames can get closed without a reason, leading to players not being paidAcknowledged
The report gives no description here.
MediumThere may exist a discordance between price units and a precision lossAcknowledged
The report gives no description here.
LowA user can initiate a game with a non-reliable priceAcknowledged
The report gives no description here.
LowCreated Check Can Be BypassedAcknowledged
The report gives no description here.
LowShould use local variables instead of storage variablesAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (10)
- https://github.com/xyro-io/smart-contracts/contracts/Treasury.sol at commit b7f77decbaae02efbba0281fd8fb30d869b5d3f6
- https://github.com/xyro-io/smart-contracts/contracts/Setup.sol at commit b7f77decbaae02efbba0281fd8fb30d869b5d3f6
- https://github.com/xyro-io/smart-contracts/contracts/Bullseye.sol at commit b7f77decbaae02efbba0281fd8fb30d869b5d3f6
- https://github.com/xyro-io/smart-contracts/contracts/Bullseye.sol at commit b9b699ad9ddf7408300eacb8c431c56cc70f2805
- https://github.com/xyro-io/smart-contracts/contracts/Setup.sol at commit b9b699ad9ddf7408300eacb8c431c56cc70f2805
- https://github.com/xyro-io/smart-contracts/contracts/Treasury.sol at commit b9b699ad9ddf7408300eacb8c431c56cc70f2805
- https://github.com/xyro-io/smart-contracts/contracts/UpDown.sol at commit b7f77decbaae02efbba0281fd8fb30d869b5d3f6
- https://github.com/xyro-io/smart-contracts/contracts/OneVsOneExactPrice.sol at commit b7f77decbaae02efbba0281fd8fb30d869b5d3f6
- https://github.com/xyro-io/smart-contracts/contracts/OneVsOneExactPrice.sol at commit b9b699ad9ddf7408300eacb8c431c56cc70f2805
- https://github.com/xyro-io/smart-contracts/contracts/UpDown.sol at commit b9b699ad9ddf7408300eacb8c431c56cc70f2805
Part of XYRO’s security record
XYROAudits4 audits by 2 firmsLast audit Jan 2025, by CertiK.
Critical findings1 critical acknowledged, not fixedReported in “Xyro” by Zokyo, Aug 2024. The team acknowledged it.
Open XYRO’s security recordSecurity firm
Zokyo89 projects reviewed · 131 reports · latest Feb 2025
See Zokyo’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us