Audit Report
Paladin reviewed MAXIMUS (Audit Report) on 23 Dec 2021: 53 findings, 0 critical; 37 marked fixed, 15 acknowledged, 1 open.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings53
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 6 |
| Medium | 0 | 0 | 3 |
| Low | 0 | 15 | 28 |
Low_disable is privateAcknowledged
The report gives no description here.
LowAmbiguous variable name isFlipAcknowledged
The report gives no description here.
LowAmbiguous withdrawal errorsAcknowledged
The report gives no description here.
LowDoes not work with price feeds that do not have 8 decimalsAcknowledged
The report gives no description here.
LowGas optimization: _approveTokenIfNeeded could use local stateAcknowledged
The report gives no description here.
LowGas optimization: Lack of calldata usageAcknowledged
The report gives no description here.
LowgetReward and withdrawAll are inconsistent with their profit amountsAcknowledged
The report gives no description here.
LowgetReward will send all WAVAX in the contract to the user, not only the WAVAX received from the rewardAcknowledged
The report gives no description here.
LowisFlip will return true for tokens which are not yet addedAcknowledged
The report gives no description here.
LowLack of events for setKeeper, setPairToken, setTokenFeed and setPricesAcknowledged
The report gives no description here.
Show 5 more
LowLack of events for setRoutePairAddress, setNotFlip, removeToken, sweep and withdrawAcknowledged
The report gives no description here.
LowLack of parameters to indicate the minimal received amount can lead to higher loss of value through frontrunning for large ordersAcknowledged
The report gives no description here.
LownotifyRewardAmount is uselessAcknowledged
The report gives no description here.
LowTypographical errorsAcknowledged
The report gives no description here.
LowWhitelisted accounts should not be allowed to use withdrawAll and getRewardAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of MAXIMUS’s security record
MAXIMUSSecurity firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us