ZAP
Audit · firm’s term: smart contract review
Zokyo reviewed Zap Protocol (ZAP) on 11 Apr 2024: 27 findings, 2 critical; 25 marked fixed, 1 acknowledged, 1 open.
Trustblock does not review code.
Findings27
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 0 | 4 |
| Medium | 0 | 0 | 2 |
| Low | 1 | 1 | 17 |
CriticalReentrance can lead to loss of fundsFixed
The report gives no description here.
CriticalUnrestricted call to destroyInstanceFixed
The report gives no description here.
HighIncorrect decimals precisionFixed
The report gives no description here.
HighIncorrect Return Of userMaxAllcFixed
The report gives no description here.
HighMethod _claim(...) calculates wrong shares and left valuesFixed
The report gives no description here.
HighMethod takeUSDCRaised() transfer wrong fundsFixed
The report gives no description here.
MediumCentralization due to destroy() methodFixed
The report gives no description here.
MediumMissing disableInitializers Call in Proxy Upgradeable Contract ConstructorFixed
The report gives no description here.
LowBlacklisting is irreversibleFixed
The report gives no description here.
LowCEI pattern not followedFixed
The report gives no description here.
Show 10 more
LowChangeable length of vestingPoints leading to issuesFixed
The report gives no description here.
LowFlawed logic in _processPrivate() methodFixed
The report gives no description here.
LowFloating Pragma Version in Solidity FilesFixed
The report gives no description here.
LowLack of Event Emission in Privileged FunctionsFixed
The report gives no description here.
LowMissing validation for vesting pointsFixed
The report gives no description here.
LowModifiers duplicatedFixed
The report gives no description here.
LowNon-upgradeable contracts inheritedFixed
The report gives no description here.
LowParameter privateTokenPrice is not validatedFixed
The report gives no description here.
LowRedundant checkFixed
The report gives no description here.
LowRemove console.logFixed
The report gives no description here.
Show 5 more
LowUnnecessary local variable in method usertaxRate()Fixed
The report gives no description here.
LowUnnecessary Safe Math is being utilizedFixed
The report gives no description here.
LowUnsafe castFixed
The report gives no description here.
LowUnused importsFixed
The report gives no description here.
LowVulnerability to frontrunning due to interplay between claim() and takeUSDCRaised()Fixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Zap Protocol’s security record
Zap ProtocolSecurity firm
Zokyo89 projects reviewed · 131 reports · latest Feb 2025
See Zokyo’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us