Audit Report
Paladin reviewed Digits DAO (Audit Report) on 9 Feb 2022: 30 findings, 0 critical; 29 marked fixed, 1 acknowledged.
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings30
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 7 |
| Medium | 0 | 1 | 5 |
| Low | 0 | 0 | 17 |
HighGov Privilege: Fees are freely adjustable up to over 100%Fixed
The report gives no description here.
HighGov Privilege: Owner can add any address as an authorized manager to withdraw funds or turn the Digits token into a honeypotFixed
The report gives no description here.
HighGov Privilege: Owner can blacklist walletsFixed
The report gives no description here.
HighGov Privilege: setTokenStorage could be used to revert transactions, siphon fees or turn the token into a honeypotFixed
The report gives no description here.
HighGov Privilege: Token owner can drain all DAI dividendsFixed
The report gives no description here.
HighGov Privilege: updateUniswapV2Router could be used to revert transactions, siphon fees or turn the token into a honeypotFixed
The report gives no description here.
HighuniswapRouter is initially set to an invalid addressFixed
The report gives no description here.
MediumDEAD address is not excluded from dividendsFixed
The report gives no description here.
MediumGov Privilege: All tokens are pre-minted to the contract ownerFixed
The report gives no description here.
MediumGov Privilege: Owner can update token address, turning the Digits token into a honeypotFixed
The report gives no description here.
Show 10 more
MediumGov Privilege: Setting the liquidity wallet to the zero address turns the token into a honeypotFixed
The report gives no description here.
MediumsetLiquidityWallet and updateUniswapV2Router lack zero address checksFixed
The report gives no description here.
Low_name, _symbol, dai and uniswapRouter can be made constantFixed
The report gives no description here.
LowA number of return values are not handledFixed
The report gives no description here.
LowA number of variables are unusedFixed
The report gives no description here.
LowA number of variables can be made externalFixed
The report gives no description here.
LowA number of variables can be made externalFixed
The report gives no description here.
LowA number of variables can be made externalFixed
The report gives no description here.
LowAmbiguous error in distributeDividendsFixed
The report gives no description here.
LowautomatedMarketMakerPairs may get out of sync with uniswapV2PairFixed
The report gives no description here.
Show 9 more
Lowdai can be made constantFixed
The report gives no description here.
Lowdai, _name and _symbol can be made constantFixed
The report gives no description here.
LowdividendTracker should be made immutableFixed
The report gives no description here.
LowdividendTracker should be made immutableFixed
The report gives no description here.
LowLack of events for functions that change sensitive variablesFixed
The report gives no description here.
LowmaxTxBPS is initially set below the minimum enforced valueFixed
The report gives no description here.
Lowsuccess is unused in distributeDividendsFixed
The report gives no description here.
LowtokenAddress should be made immutableFixed
The report gives no description here.
LowUnnecessary zero address checks in _executeTransferFixed
The report gives no description here.
Contracts in scope3
| Address | Chain | Source code |
|---|---|---|
| 0x94de014e5b5221a9e1b7c02518463074a79dde6a | Chain: Avalanche | Source code: Verified source |
| 0x6d39663ec3b905c019642e75fe674fc67384e58e | Chain: Avalanche | Source code: Verified source |
| 0x18e2269f98db2eda3cfc06e6cca384b291e553d9 | Chain: Avalanche | Source code: Verified source |
Part of Digits DAO’s security record
Digits DAOSecurity firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us