Audit Report
Paladin reviewed NAIFU (Audit Report) on 26 Apr 2024: 15 findings, 0 critical; 13 marked fixed, 2 acknowledged.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings15
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 3 |
| Medium | 0 | 0 | 4 |
| Low | 0 | 2 | 6 |
HighBonus rewards are lost if users deposit when still under withdrawal lockupFixed
The report gives no description here.
HighContract generally has low governance authority as owner cannot steal from usersFixed
The report gives no description here.
HighReward token is incorrectly transferred to users as bonus tokenFixed
The report gives no description here.
MediumblockSmartContract is not effective at preventing smart contracts from interacting with the poolFixed
The report gives no description here.
MediumOwner can adjust endBlock and rewardPerBlock but cannot add more rewards to the contract after reward emission has startedFixed
The report gives no description here.
MediumOwner can request reward and withdraw immediatelyFixed
The report gives no description here.
MediumOwner depositing reward more than once will overwrite the previously deposited tokensFixed
The report gives no description here.
LowGas optimizationsFixed
The report gives no description here.
LowOnce rewardsWithdrawal() is called, deposits should be disabledFixed
The report gives no description here.
LowpendingBonus() can revert if totalRewardTokensDeposited is 0Fixed
The report gives no description here.
Show 3 more
LowtotalStakeTokenBalance() is incorrect if stake token is the same as bonus tokenFixed
The report gives no description here.
LowTypographical issuesFixed
The report gives no description here.
LowWithin rewardsWithdrawal(), total rewards should be set to 0 once rewards are transferred outFixed
The report gives no description here.
Contracts in scope1
| Address | Chain | Source code |
|---|---|---|
| 0x9b40af92339066bfc03a15e15052015372938aa0 | Chain: Ethereum | Source code: Verified source |
Part of NAIFU’s security record
NAIFUSecurity firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us