Audit Report - Trader Joe Reward Distributor

Paladin3 addresses on Avalanche, BNB Chain and Arbitrum

Paladin reviewed Trader Joe (Audit Report - Trader Joe Reward Distributor) on 11 Jun 2022: 9 findings, 0 critical; 8 marked fixed, 1 acknowledged.

No open critical findings
Open the reportOpen Trader Joe’s security record
Report stored on IPFS. Content hash QmVqNWikf48NpBptHxKJecinvMRSE36YH8aFtyCGu9fAHJ

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High003
Medium000
Low015
HighDouble rewards issued in the new DistributorFixed

The report gives no description here.

HighReentrancy risk: _claimReward does not adhere to checks-effects- interactions, potentially allowing the whole RewardDistributor to be drained if reentrancy is permitted on the tokens or AVAXFixed

The report gives no description here.

HighReward inflation exploit: A strategic user can drain the new distributor’s reward tokens through a strategically organized flashloan exploitFixed

The report gives no description here.

LowCritical variables can be changed which can lead to the misconfiguration and drainage of the rewarderFixed

The report gives no description here.

Lowinitialize method can be called twiceFixed

The report gives no description here.

LowLack of validationFixed

The report gives no description here.

LowThe protocol will stop working on Sun, Feb 07, 2106Fixed

The report gives no description here.

LowTypographical errorsFixed

The report gives no description here.

Contracts in scope1

Part of Trader Joe’s security record

Trader Joe
Audits12 audits by 3 firmsLast audit Mar 2024, by Paladin.
Critical findingsNo open critical findingsAcross 12 reports.
Open Trader Joe’s security record

Security firm

Paladin

176 projects reviewed · 241 reports · latest Apr 2025

See Paladin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us