Audit Report
Paladin reviewed Algebra Labs (Audit Report) on 12 Feb 2024: 26 findings, 0 critical; 8 marked fixed, 17 acknowledged, 1 open.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings26
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 3 | 0 |
| Medium | 1 | 4 | 1 |
| Low | 0 | 10 | 7 |
HighFlashloan fees and reflection tokens are distributed unfairlyAcknowledged
The report gives no description here.
HighGovernance: Change of various parameters can result in DoS and loss of rewardsAcknowledged
The report gives no description here.
HighGovernance: Introduction of hooksAcknowledged
The report gives no description here.
MediumAdvanced exploit including frontrunning allows for stealing native tokens from users upon minting / increase of liquidity if multicall is not usedAcknowledged
The report gives no description here.
Mediumflash function induces faulty state during _flashCallbackAcknowledged
The report gives no description here.
MediumLoss of rewards upon exitFarming during emergencyWithdrawAcknowledged
The report gives no description here.
MediumsetRates lacks proper input validation which allows INCENTIVE_MAKER to steal all rewardsAcknowledged
The report gives no description here.
LowcommunityFee should never be zeroAcknowledged
The report gives no description here.
LowFunctions do not serve any use-caseAcknowledged
The report gives no description here.
LowGas optimizationsAcknowledged
The report gives no description here.
Show 7 more
LowGas optimizationsAcknowledged
The report gives no description here.
LowLack of refund for sent tokens if amounts are zeroAcknowledged
The report gives no description here.
LowMalicious user might abuse disconnected stateAcknowledged
The report gives no description here.
LowRisk of overflow for reward calculationAcknowledged
The report gives no description here.
LowswapWithPaymentInAdvance does not update reserves during beginningAcknowledged
The report gives no description here.
LowTransfer out happens before reserve changeAcknowledged
The report gives no description here.
LowUnnecessary tick determination during _updatePositionAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Algebra Labs’s security record
Algebra LabsSecurity firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us