[SCA] Jellyv Security Smart Contract Audit

Summary

Jellyverse represents an expansive ecosystem within the decentralized finance (DeFi) landscape, managed by its community via a decentralized autonomous organization (DAO). It is dedicated to advancing the latest version of DeFi, often referred to as DeFi 3.0, with a vision to establish a sustainable, yield-focused framework that merges protocols with tangible real-world assets. The platform offers multiple utilities crafted to address diverse financial requirements, all regulated by its native cryptocurrency, JLY.

Project

Jellyverse

Ethereum

No active critical issues

Last audited on 2024/10/10

Auditor

354 audits on Trustblock

Multi-Tags

Issues (11)

	Low	Medium	High	Critical	Total
Not fixed	4	1	-	-	5
Fixed	1	3	-	2	6
Total	5	4	0	2	11

Contracts (32)

#	File Name
21	contracts/Chest.sol
22	contracts/vendor/prb/math/v0.4.1/sd59x18/Math.sol
23	contracts/StakingRewardDistribution.sol
24	contracts/LiquidityRewardDistribution.sol
25	contracts/extensions/GovernorCountingSimple.sol
26	contracts/OfficialPoolsRegister.sol
27	contracts/utils/Vesting.sol
28	contracts/JellyTimelock.sol
29	contracts/vendor/prb/math/v0.4.1/sd59x18/ValueType.sol
30	contracts/extensions/GovernorTimelockControl.sol

[SCA] Jellyverse / Governor

Summary

Issues (11)

Proposals are vulnerable to metamorphic attacksnot_fixed/medium

buyWithUsd will revert for USDT due to IERC20 approvenot_fixed/low

Lack of upper bound Beneficiaries may lead to deny of servicenot_fixed/low

Missing fee validation in setFee functionnot_fixed/low

Voting power restored without cost after cliff period not_fixed/low

Contracts (32)