Horsea Finance

CertiK10 Mar 2023Code version: not recorded (see the report)

Audit

CertiK reviewed HorseaFi (Horsea Finance) on 10 Mar 2023: 28 findings, 0 critical; 2 acknowledged, 26 open.

No open critical findings

Open the report Open HorseaFi’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings28

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged
Critical	0	0
High	0	1
Medium	0	1
Low	26	0

HighImproper Update For Router AddressAcknowledged

The function `updateUniswapV2Router()` does not check if the pair has been created. If the pair has already been created, then calling `createPair()` on the factory contract will always cause this function to revert, making it impossible to update the router to this address. In addition, the contract does not approve the new router address, which will cause any transfers that swap tokens via the router to revert.

Medium`updateRewardToken()` Should Only Be Called If AlAcknowledged

If `updateRewardToken()` is called when there are dividends that have not been distributed, then the contract's balance of the new reward token will not match the amount of dividends to be distributed.