Battle For Giostone security record
As of 3 Nov 2026, Battle For Giostone has 1 audit report on Trustblock, by Paladin, dated 5 Nov 2022. That report lists no open critical findings. It also holds 9 deployed contracts on 1 chain.
Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Audit Report | Security firm: Paladin | Date: | Scope: 9 addresses on Avalanche | No open critical findings | Open · paladinsec.co |
Findings25
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 3 |
| Medium | 0 | 0 | 2 |
| Low | 1 | 0 | 19 |
HighAn unexpectedly high amount of tokens can be allocated to team members, exceeding the actual contract balance, preventing them from withdrawing as the token transfer would failAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportHighContract will likely gridlock and prevent any further claiming with a large amount of users (~90+ recipients)Audit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportHighThe contract will fully grid-lock and prevent all tokens from ever being withdrawn if no unlock has been made for just three days due to a literal being coerced into a uint8, causing an overflowAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportMediumRecipients who claim their whole allocation at the end of the vesting will receive less than expected and mess up the contract logic due to an overflow exceptionAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportMediumUsing uint16 for the vestingCycles variable type could potentially eventually gridlock the contractAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportLowaddWhiteList does not adhere to the checks-effect-interaction pattern and the owner could potentially withdraw more tokens than expected on TGEAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportLowClaiming delays a user their vesting schedule by up to 24 hours due to roundingAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportLowContract can theoretically be re-initialized once everyone withdrawsAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportLowContract owner is added as a member without any validation checkAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportLowContracts do owner management manuallyAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportShow 10 more
LowDivision before multiplication increases rounding error slightly within the function which calculates the amount of tokens to receiveAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportLowinit function logic is also executed within allocate and therefore seems redundantAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportLowitoken is privateAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportLowLack of safeTransfer usageAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportLowRecipients can instantly unlock their whole allocation through a reentrancy exploit if the token allows for reentrancyAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportLowThe contract pragmas are extremely wideAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportLowtoken is never setAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportLowTypographical errorsAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportLowTypographical errors and gas optimizationsAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportLowTypographical errors and gas optimizationsAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportShow 4 more
LowTypographical errors and gas optimizationsAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportLowUnclear calc function name and parametersAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportLowVesting cycle business logic appears unnecessaryAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportLowWithdrawToMember function does not follow the checks-effects- interactions pattern, which would allow a single member to drain the contract if the itoken contract allows for reentrancyAudit Report · Paladin · 5 Nov 2022Fixed
The report gives no description here.
Open the reportContracts9
| Address | Chain | Source code |
|---|---|---|
| 0xf394effbb63c925f7b2533cec03cbca0311f597d | Chain: Avalanche | Source code: Verified source |
| 0x872443a10843fff012ef75a2dac6fdc7f5580932 | Chain: Avalanche | Source code: Verified source |
| 0x70d2f5877ed1ae0af659a3aec46799568c8dcc2f | Chain: Avalanche | Source code: Verified source |
| 0x4cfa9eca7317d099d447032f700f43e5ce2d30c3 | Chain: Avalanche | Source code: Verified source |
| 0xb7b608f6c3719ad61edfcc2f6c2fd5378940e859 | Chain: Avalanche | Source code: Verified source |
| 0x9973c0fff6e0c3ae683337e8b5760b2a0a437647 | Chain: Avalanche | Source code: Verified source |
| 0xea75db6b617e6d3375372b9fa2aaf49e5b01cc81 | Chain: Avalanche | Source code: Verified source |
| 0x69ae264162c32feffe1656751abd69ba76e2d306 | Chain: Avalanche | Source code: Verified source |
| 0x98a10009ce0c795ba8779e518fd115db6a902ece | Chain: Avalanche | Source code: Verified source |
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="battle-for-giostone"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us