DefiApp security review
Audit · firm’s term: security review
Pashov Audit Group reviewed DefiApp (DefiApp security review) on 10 Jan 2025: 13 findings, 0 critical; 11 marked fixed, 2 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings13
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 2 |
| Low | 0 | 2 | 8 |
HighSale token amount is not adjusted per its decimalsFixed
The report gives no description here.
MediumInability to vest and claim saleTokensFixed
The report gives no description here.
MediummaxTotalFunds() would be inflated during each callFixed
The report gives no description here.
LowAll vestings with duration < 60 days would be created as instantFixed
The report gives no description here.
LowCreating vesting with amount > 3.4e38 could lead to stucked tokensFixed
The report gives no description here.
LowInability to utilize setVestTokenURI functionality in VestingManagerFixed
The report gives no description here.
LowsafeMint() in createVesting() could be called with a zero addressFixed
The report gives no description here.
LowsetTiers function has the wrong check for empty tiersFixed
The report gives no description here.
LowtokenURI function would revert for all vestings created by PublicSale contractFixed
The report gives no description here.
LowTransaction reversion due to the inconsistent amount checkFixed
The report gives no description here.
Show 1 more
LowvestSummary does not include cliff shares in the calculationFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of DefiApp’s security record
DefiAppSecurity firm
Pashov Audit Group86 projects reviewed · 165 reports · latest Aug 2026
See Pashov Audit Group’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us