SafePal - Audit
CertiK reviewed SafePal (SafePal - Audit) on 1 Feb 2024: 5 findings, 0 critical; 1 marked fixed, 1 acknowledged, 3 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Findings5
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 3 | 0 | 0 |
HighCentralization RisksAcknowledged
In the contract `StakePool` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and - call `recoverWrongTokens()` to withdraw ERC20 tokens other than `stakedToken`. - call `setEmergencyWithdrawSwitch()` to toggle the `emergencyWithdrawSwitch` to enable emergency withdrawal and ignore the stake lock time.  In the contract `Ownable` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority. 
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
- src/stake.sol
Part of SafePal’s security record
SafePalSecurity firm
CertiK1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us