GalaxyGoogle DAO security record

BNB Chaingalaxygoggle.moneyX

As of 3 Nov 2026, GalaxyGoogle DAO has 1 audit report on Trustblock, by Paladin, dated 17 Jan 2022. That report lists no open critical findings. It also holds 13 deployed contracts on 1 chain.

Critical findings
No open critical findings
In 1 report.
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.

Audits1

Newest first

AuditSecurity firmDateScopeCritical findingsReport
Audit Report

Audit

Security firm: PaladinDate: Scope: 13 addresses on BNB ChainNo open critical findingsOpen · paladinsec.co

Findings56

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical000
High021
Medium012
Low0464
HighStaked amount is relocked on subsequent stakes, even if the stake is made by third-parties allowing for targeted Denial of ServiceAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
HighVested amount is relocked on deposit, even if the deposit is made by third-parties allowing for targeted Denial of ServiceAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
MediumThe last owner can be reclaimed across multiple contractsAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
Low_burnFrom is marked as publicAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowAdding a token as both a liquidity and reserve token would cause it to be double counted in the treasury valueAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowAdjustment target is never reachedAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowAdjustment target is never reachedAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowAdjustments are not reset when recipient is removedAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowAmbiguous errorsAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowbondPrice calculation is inconsistent with TimeBondDepositoryAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
Show 10 more
LowbondPriceInUSD is denominated in the decimals of the other token in the LP and might not be correct for non-stablecoin LPsAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowContract could theoretically run out of GGAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowContract does not work with a zero vestingTermAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
Lowdeposit is vulnerable to reentrancy if the principle has a reentrancy vectorAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowDOMAIN_SEPARATOR can be made immutableAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowGas optimization: Contract uses hardcoded strings in SafeMath functionsAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowGas optimization: Storage variables are frequently unnecessarily rereadAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowGas optimization: Usage of decimals as a precision multiplierAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowInconsistency: Unused mint function emits an event from address(this) while the mint logic during initialization emits an event from the zero addressAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowInfrequent rebases incentivize malicious parties to strategically (re)order transactions for arbitrage and steal all rebased tokens off the LP pairsAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
Show 10 more
LowinitializeBondTerms has no validationAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowLack of component safeguards in a system that plans to increase in number of components over time is considered brittleAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowLack of events for various functionsAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowLack of safeTransfer usage within incurDebtAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowLack of validationAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowManage will always do an excessReserve check even if the token is not within the liquidity or reserves tokensAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowMarkdown will misbehave if an LP with two non-GG tokens is providedAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowNew owner variable is privateAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
Lowpermit can be frontrun and cause denial of serviceAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowPhishing: Frontend could trick users into sending too much BNB for depositsAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
Show 10 more
LowPhishing: stake function allows to stake towards a different addressAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowpriceFeed is internalAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowRebases can be arbitraged/frontranAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowrepayDebtWithOhm has inconsistent privilege requirements which allows for slight privilege escalationAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowReserve value mechanism could cause withdrawals and other operations to temporarily failAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowThe contracts become unusable in the year 2106Audit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowThe contracts do not work with tax on transfer tokensAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowThe protocol will likely malfunction if ChainLink feeds for BNB will be different than 8 decimalsAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowTimeBondingCalculator can only value pairs in which the two tokens have equal “value”Audit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowTransactionless approval permit mechanism still references zero swapAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
Show 9 more
LowTypographical errorsAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowUI markdown function is vulnerable to price manipulationAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowUnbounded gas usage due to extensive for-loop usageAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowUncast addresses make the code more verbose than it needs to beAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowUnder a constant and small circulating supply, the non-circulating supply starts increasing more rapidly with every rebaseAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowUnnecessary comparison to true on withdraw functionAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowUnused variables/dependencies throughout the contractsAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowVarious functions can be made externalAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report
LowVault can be set to the zero addressAudit Report · Paladin · 17 Jan 2022Acknowledged

The report gives no description here.

Open the report

Contracts13

AddressChainSource code
Chain: BNB ChainSource code: Verified source
Chain: BNB ChainSource code: Verified source
Chain: BNB ChainSource code: Verified source
Chain: BNB ChainSource code: Verified source
Chain: BNB ChainSource code: Verified source
Chain: BNB ChainSource code: Verified source
Chain: BNB ChainSource code: Verified source
Chain: BNB ChainSource code: Verified source
Chain: BNB ChainSource code: Verified source
Chain: BNB ChainSource code: Verified source

All 13 addresses

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
	<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
	<div
		data-tb-project-widget
		data-tb-project-slug="galaxy-goggle-dao"
	></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us