Audit Report
Paladin reviewed Avabot (Audit Report) on 29 Jan 2024: 25 findings, 0 critical; 13 marked fixed, 11 acknowledged, 1 open.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings25
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 1 | 1 |
| Medium | 0 | 0 | 5 |
| Low | 0 | 10 | 7 |
HighArbitrary execution possibility due to unchecked router parameter within swap functionFixed
The report gives no description here.
MediumAdvanced exploit allows for stealing AVAX in the contractFixed
The report gives no description here.
MediumHigh initial fee can result in loss of fundsFixed
The report gives no description here.
MediumLack of validation for amountInFixed
The report gives no description here.
MediumRisk of router not having immutable variablesFixed
The report gives no description here.
MediumSlippage within execute function check is voidFixed
The report gives no description here.
LowLack of input validation for path within execute functionFixed
The report gives no description here.
LowLack of safeTransfer usageFixed
The report gives no description here.
LowLack of safeTransfer usageFixed
The report gives no description here.
LowLack of safeTransfer usageFixed
The report gives no description here.
Show 3 more
LowLack of safeTransfer usageFixed
The report gives no description here.
LowLack of upper limits for recipientsFixed
The report gives no description here.
LowTypographical issuesFixed
The report gives no description here.
Contracts in scope4
| Address | Chain | Source code |
|---|---|---|
| 0xbdbe51b4206a7677039c1b7b9d6b0e31159c9c99 | Chain: Avalanche | Source code: Verified source |
| 0x27b0ddb09157171316089ebafbe5e7dff8979c5e | Chain: Avalanche | Source code: Verified source |
| 0x2ff23cf639c18ad49e50e89e10f0b59f147788b0 | Chain: Avalanche | Source code: Verified source |
| 0x9f71b3118d97a448b127bf7677a59ab7454d0a04 | Chain: Avalanche | Source code: Verified source |
Part of Avabot’s security record
Security firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us