COLONY security record
As of 30 Oct 2026, COLONY has 2 audit reports by 1 security firm on Trustblock; the latest is by Paladin, dated 26 Feb 2024. Those reports list no open critical findings. It also holds 19 deployed contracts on 1 chain.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits2
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| For Colony (Token & Staking) | Security firm: Paladin | Date: | Scope: 4 addresses on Avalanche | No open critical findings | Open · paladinsec.co |
| Audit Report (Colony) | Security firm: Paladin | Date: | Scope: 15 addresses on Avalanche | No open critical findings | Open · paladinsec.co |
Findings111
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 16 | 8 |
| Medium | 0 | 7 | 9 |
| Low | 2 | 15 | 54 |
HighaddReward and addCustomReward allow the transfer of tokens in from any arbitrary addressFor Colony (Token & Staking) · Paladin · 26 Feb 2024Fixed
The report gives no description here.
Open the reportHighA malicious attacker can steal projectTokenAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportHighcheckClaimableCeTokens relies on variable that can be changedAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportHighOwner can set a malicious/flawed ceTokenDistributorAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportHighOwner has full control over share distribution and recipient addressesAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportHighRegistering a malicious ceToken would overwrite the reward tokenAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportHighThe contract owner can DoS deal finalizationAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportHighVesting parameters cannot be updatedAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportMediumIncorrect migration will result in permanently stuck fundsFor Colony (Token & Staking) · Paladin · 26 Feb 2024Fixed
The report gives no description here.
Open the reportMediumUsers can backrun initialization and stake without paying a feeFor Colony (Token & Staking) · Paladin · 26 Feb 2024Fixed
The report gives no description here.
Open the reportShow 10 more
MediumGeneral lack of CEIAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportMediumLack of upper fee limitAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportMediumschedule.releaseDate can be same timestampAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportMediumsetStableCoinDistributionStrategy is not exposedAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportMediumUnclaimed tokens are lostAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportMediumUsage of msg.sender for fee valueAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportMediumUsers can circumvent the special fee logicAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowAVAX transfer will not work for contracts without fallback functionFor Colony (Token & Staking) · Paladin · 26 Feb 2024Fixed
The report gives no description here.
Open the reportLowclaimableReward only accounts for one categoryFor Colony (Token & Staking) · Paladin · 26 Feb 2024Fixed
The report gives no description here.
Open the reportLowGas optimizationsFor Colony (Token & Staking) · Paladin · 26 Feb 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowLarge amount of reward data can result in DoSFor Colony (Token & Staking) · Paladin · 26 Feb 2024Fixed
The report gives no description here.
Open the reportLowLoop will not revert if desired data is not matchedFor Colony (Token & Staking) · Paladin · 26 Feb 2024Fixed
The report gives no description here.
Open the reportLowMultiplier for reward calculation might be insufficientFor Colony (Token & Staking) · Paladin · 26 Feb 2024Fixed
The report gives no description here.
Open the reportLowTypographical issuesFor Colony (Token & Staking) · Paladin · 26 Feb 2024Fixed
The report gives no description here.
Open the reportLowTypographical IssuesFor Colony (Token & Staking) · Paladin · 26 Feb 2024Fixed
The report gives no description here.
Open the reportLowViolation of checks-effects-interactions patternFor Colony (Token & Staking) · Paladin · 26 Feb 2024Fixed
The report gives no description here.
Open the reportLowantTierProgram may differ from the actual programAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowantToken can be made immutableAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowAnyone can call finalizeDealAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowCEI pattern is not adhered toAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowChecks-effects-interactions pattern is not adhered toAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowContract balance is used as lpSupplyAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowContract is not abstractAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowDecimal return values might be incorrectAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowDOMAIN_SEPARATOR can be made immutableAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowfactory can be made immutableAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowfindTierIndex might run out of gasAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowGas optimizationAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowGas optimizationAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowGeneral lack of address(0) validationAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowLack of checks-effects-interactionsAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowLack of checks-effects-interactionsAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowLack of events for updatePrivilegedAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowlinearVestingFactory and discreteVestingFactory are set without emitting the events in the constructorAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowMissing gapAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowMissing visibility for privileged addressesAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowMissing visibility for privileged addressesAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowMissing visibility of all vestingCreatorsAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowMissing visibility of all vestingCreatorsAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLownest can be made immutableAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowPhases can be hardcoded in the bytecode of the contract to save some gasAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowRead-only reentrancy within onRewardAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowSchedule length is uncheckedAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowSchedules can contain zero amountsAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowSeveral variables can be made immutableAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowshareMantissa rounds down in the case of a very low token allocationAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowstakingRewardsDuration and stakingV2 can be made immutableAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowThe whitelisted pools are not directly usedAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowTypographical issueAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowTypographical issuesAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowTypographical issuesAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowTypographical issuesAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowUI function getProjectNests can run out of gasAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowUnecessary roundingsAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowUnnecessary roundingAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowUnused code sectionsAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowUnused importsAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowUsers can deposit arbitrary lp tokensAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowVariable(s) can be immutableAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportLowvestingFactory can be made immutableAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportShow 1 more
LowvestingFactory can be made immutableAudit Report (Colony) · Paladin · 19 Feb 2024Fixed
The report gives no description here.
Open the reportContracts19
| Address | Chain | Source code |
|---|---|---|
| 0x1988aaddae2c42a05f31a516b4462253b063cd2b | Chain: Avalanche | Source code: Verified source |
| 0xb746d18f93b9264ba08d6a38e934329c984e75ec | Chain: Avalanche | Source code: Verified source |
| 0x62b38293896e040e36fe5345f9d30dbfd75c04b9 | Chain: Avalanche | Source code: Verified source |
| 0x0a00a74f28d1bc24ddf73794fcd594cbbf291641 | Chain: Avalanche | Source code: Verified source |
| 0xcc42c3fdd8c0400236c7cfa29d3687adb6b1d780 | Chain: Avalanche | Source code: Verified source |
| 0x814ebf333bdaf1d2d364c22a1e2400a812f1f850 | Chain: Avalanche | Source code: Verified source |
| 0x1a5bdc587e84e215e61b87e433c180611e71f4e6 | Chain: Avalanche | Source code: Verified source |
| 0x2ac45f92eabaa8dcb2ea1807a659a1393c3947d0 | Chain: Avalanche | Source code: Verified source |
| 0xa2e7ab89a2c59818e1ecd925e718a9d63889a131 | Chain: Avalanche | Source code: Verified source |
| 0xc5f368e6d0192764547c4209a7e622fc05c82fcb | Chain: Avalanche | Source code: Verified source |
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="colony"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us