Gitcoin Token Distribution

ConsensysFiles named in the report

Consensys reviewed Gitcoin (Gitcoin Token Distribution) on 1 Apr 2021: 8 findings, 0 critical; all marked fixed.

No open critical findings
Open the reportOpen Gitcoin’s security record

Report hosted on diligence.security.

Trustblock does not review code.

Findings8

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium002
Low006
MediumESMS use of sanitized user_amount & user_id valuesFixed

The report gives no description here.

MediumPrefer using abi.encode in TokenDistributorFixed

The report gives no description here.

LowESMS use of environment variable for chain info [Optimization]Fixed

The report gives no description here.

LowImprove efficiency by using immutable in TreasuryVesterFixed

The report gives no description here.

LowMethod returns bool but result is never used in TokenDistributor.claimTokensFixed

The report gives no description here.

LowRename method _hashLeaf to something that represents the validity of the leafFixed

The report gives no description here.

LowSimplify claim tokens for a gas discount and less codeFixed

The report gives no description here.

LowUse a unified compiler version for all contractsFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (6)

  • governance/contracts/TreasuryVester.sol
  • governance/contracts/TokenDistributor.sol
  • governance/contracts/SafeMath.sol
  • governance/contracts/Timelock.sol
  • governance/contracts/GovernorAlpha.sol
  • governance/contracts/GTC.sol

Part of Gitcoin’s security record

Gitcoin
Audits1 audit by 1 firmLast audit Apr 2021, by Consensys.
Critical findingsNo open critical findingsIn 1 report.
Open Gitcoin’s security record

Security firm

Consensys

41 projects reviewed · 59 reports · latest Oct 2024

See Consensys’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us