For Trader Joe (Core v2.

Paladin31 Mar 20249 addresses on Avalanche, BNB Chain and Arbitrum

Paladin reviewed Trader Joe (For Trader Joe (Core v2.) on 31 Mar 2024: 26 findings, 0 critical; 13 marked fixed, 13 acknowledged.

No open critical findings

Open the report Open Trader Joe’s security record

Report stored on IPFS. Content hash QmeKcJaqifx72gatS8NZfUu6kGi9XXBXFJVwrPcWNZaeRL

Trustblock does not review code.

Findings26

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	1	2
Medium	0	2	2
Low	0	10	9

HighA malicious party can DoS the pair and hook, disabling the rewarder permanentlyFixed

The report gives no description here.

HighUnconsidered edge-case within _getPendingTotalRewards can result in DoS of reward update due to underflowFixed

The report gives no description here.

MediumgetPendingRewards returns incorrect pending rewardsFixed

The report gives no description here.

MediumSubsequent liquidity additions can result in overflow of overall bin liquidityFixed

The report gives no description here.

Low_claim will revert if contract has insufficient tokensFixed

The report gives no description here.

LowAutomatic reward claim largely increases attack surfaceFixed

The report gives no description here.

LowExternal call to extraRewarder is executed before MOE rewardFixed

The report gives no description here.

LowInconsistency in token claim for recipientsFixed

The report gives no description here.

LowTypographical issuesFixed

The report gives no description here.

LowTypographical issuesFixed

The report gives no description here.

Show 3 more

LowTypographical issuesFixed

The report gives no description here.

LowTypographical issuesFixed

The report gives no description here.

LowUnsafe casting within _updateUser functionFixed

The report gives no description here.

Contracts in scope3

Address	Chain	Source code
0xafb85a12babfafabfe1a518594492d5a830e782a	Chain: Avalanche	Source code: Verified source
0xa6630671775c4ea2743840f9a5016dcf2a104054	Chain: Avalanche	Source code: Verified source
0xf6863db7323aac43fe8aef0b3ef63aa6b32ddb3b	Chain: Avalanche	Source code: Verified source

Part of Trader Joe’s security record

Trader Joe

Audits12 audits by 3 firmsLast audit Mar 2024, by Paladin.

Critical findingsNo open critical findingsAcross 12 reports.

Open Trader Joe’s security record

Security firm

Paladin

176 projects reviewed · 241 reports · latest Apr 2025

See Paladin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.