Valkyrie Audit Report
Audit · firm’s term: audit report
Cyfrin reviewed Paladin (Valkyrie Audit Report) on 12 Mar 2025: 26 findings, 3 critical; 23 marked fixed, 3 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings26
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 3 |
| High | 0 | 1 | 8 |
| Medium | 0 | 2 | 5 |
| Low | 0 | 0 | 7 |
Marked Informational or Gas by the firm. Not counted as findings.
InformationalThe updated version of BaseHook should be usedAcknowledged
The report gives no description here.
GasUnnecessary liquidity sync can be removedAcknowledged
The report gives no description here.
GasUnnecessary native token checksAcknowledged
The report gives no description here.
GasCache amount variable should be used within loop to save gasFixed
The report gives no description here.
GasCache storage reads in TimeWeightedIncentiveLogicFixed
The report gives no description here.
InformationalInsufficient validation on the pool key in liquidity-modifying functionsFixed
The report gives no description here.
GasSuperfluous assignment can be removedFixed
The report gives no description here.
InformationalUnnecessary BoostedIncentiveLogic functions can be removedFixed
The report gives no description here.
GasUnnecessary liquidity read and subtraction operation can be removedFixed
The report gives no description here.
InformationalUnused custom errors and constants can be removedFixed
The report gives no description here.
Show 2 more
InformationalUse days keyword for better readabilityFixed
The report gives no description here.
InformationalVarious typographical errors should be fixedFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Paladin’s security record
PaladinSecurity firm
Cyfrin28 projects reviewed · 79 reports · latest Sep 2026
See Cyfrin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us