Fei Tribechief
Consensys reviewed Fei Protocol (Fei Tribechief) on 1 Jul 2021: 15 findings, 1 critical; none marked fixed.
Report hosted on diligence.security.
Trustblock does not review code.
Findings15
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 1 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 4 | 0 | 0 |
| Low | 10 | 0 | 0 |
CriticalTribalChief - A wrong user.rewardDebt value is calculated during the withdrawFromDeposit function callOpen
The report gives no description here.
MediumEthCompoundPCVDeposit - should provide means to recover ETHOpen
The report gives no description here.
MediumTribalChief - Setting the totalAllocPoint to zero shouldn’t be allowedOpen
The report gives no description here.
MediumTribalChief - Unlocking users’ funds in a pool where a multiplier has been increased is missingOpen
The report gives no description here.
MediumTribalChief - Unsafe down-castingsOpen
The report gives no description here.
LowCompoundPCV - documentation & testingOpen
The report gives no description here.
LowCompoundPCVDepositBase - verify provided CToken address is actually a CTokenOpen
The report gives no description here.
LowEthCompoundPCVDeposit - stick to upstream interface contract namesOpen
The report gives no description here.
LowTribalChief - duplicate import SafeERC20Open
The report gives no description here.
LowTribalChief - Governor decrease of pool’s allocation point should unlock depositors’ fundsOpen
The report gives no description here.
Show 5 more
LowTribalChief - governorAddPoolMultiplier should emit a PoolLocked eventOpen
The report gives no description here.
LowTribalChief - immutable vs constantOpen
The report gives no description here.
LowTribalChief - new block reward retrospectively takes effect on pools that have not been updated recentlyOpen
The report gives no description here.
LowTribalChief - resetRewards should emit an eventOpen
The report gives no description here.
LowTribalChief - updatePool invocation inside _harvest should be moved to harvest insteadOpen
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Fei Protocol’s security record
Fei ProtocolSecurity firm
Consensys41 projects reviewed · 59 reports · latest Oct 2024
See Consensys’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us