Catalyst security record
As of 20 Oct 2026, Catalyst has 3 audit reports by 2 security firms on Trustblock; the latest is by Ackee Blockchain Security, dated 21 Jun 2024. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits3
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Catalyst Generalised Incentives | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| Catalyst security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| Catalyst security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded (see the report) | 2 critical findings, fixed | Open · GitHub |
Findings22
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 4 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 7 |
| Low | 0 | 3 | 7 |
CriticalFake escrow can craft ACK packets with any messageIdentifier and withdraw all bountiesCatalyst Generalised Incentives · Ackee Blockchain Security · 21 Jun 2024Fixed
The report gives no description here.
Open the reportCriticalWithdrawing collateral and fees and bypassing trust safety mechanismCatalyst security review · Pashov Audit Group · 12 Apr 2024Fixed
The report gives no description here.
Open the reportCriticalAttacker can drain all ETH from IPSeed due to malicious IIPSeedCurve implementationCatalyst security review · Pashov Audit Group · 23 Dec 2023Fixed
The report gives no description here.
Open the reportCriticalAttacker can drain all ETH from IPSeed due to re-configuring tokenIdCatalyst security review · Pashov Audit Group · 23 Dec 2023Fixed
The report gives no description here.
Open the reportHighBroken mint if market pre-mint less than pCatalyst security review · Pashov Audit Group · 12 Apr 2024Fixed
The report gives no description here.
Open the reportMediumFee recipient addresses are not validated against the zero addressCatalyst Generalised Incentives · Ackee Blockchain Security · 21 Jun 2024Fixed
The report gives no description here.
Open the reportMediumInsufficient validation of a disabled route may lead to the locked EtherCatalyst Generalised Incentives · Ackee Blockchain Security · 21 Jun 2024Fixed
The report gives no description here.
Open the reportMediumMessageDelivered event is used for both successful and failed callsCatalyst Generalised Incentives · Ackee Blockchain Security · 21 Jun 2024Fixed
The report gives no description here.
Open the reportMedium10% maximum pre-mint check can be bypassedCatalyst security review · Pashov Audit Group · 12 Apr 2024Fixed
The report gives no description here.
Open the reportMediumDonating without transferring contributionCatalyst security review · Pashov Audit Group · 12 Apr 2024Fixed
The report gives no description here.
Open the reportShow 9 more
MediumRevert if supply is less than premint parameterCatalyst security review · Pashov Audit Group · 12 Apr 2024Fixed
The report gives no description here.
Open the reportMediumburn() function doesn't have slippage controlCatalyst security review · Pashov Audit Group · 23 Dec 2023Fixed
The report gives no description here.
Open the reportLowUnfair fee distribution due to floating block.timestampCatalyst Generalised Incentives · Ackee Blockchain Security · 21 Jun 2024Fixed
The report gives no description here.
Open the reportLowDust amount left after all refund is madeCatalyst security review · Pashov Audit Group · 12 Apr 2024Fixed
The report gives no description here.
Open the reportLowAdd sanity checks when set storage variablesCatalyst security review · Pashov Audit Group · 23 Dec 2023Fixed
The report gives no description here.
Open the reportLowMalicious user can submit json injection in uri()Catalyst security review · Pashov Audit Group · 23 Dec 2023Fixed
The report gives no description here.
Open the reportLowMINIMUM_TRADE_SIZE value leakCatalyst security review · Pashov Audit Group · 23 Dec 2023Fixed
The report gives no description here.
Open the reportLowSQRT OverflowCatalyst security review · Pashov Audit Group · 23 Dec 2023Fixed
The report gives no description here.
Open the reportLowUser can accidentally burn his tokens instead of sellingCatalyst security review · Pashov Audit Group · 23 Dec 2023Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="catalyst"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us