KittenSwap security record
As of 10 Nov 2026, KittenSwap has 1 audit report on Trustblock, by Pashov Audit Group, dated 5 Aug 2025. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Audits3
Newest first
| Report | Security firm | Date | Scope | Critical findings | Source |
|---|---|---|---|---|---|
| KittenSwap security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded; see the report | 1 critical finding, fixed | GitHub ↗ |
| KittenSwap security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded; see the report | 3 critical findings, fixed | GitHub ↗ |
| KittenSwap security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded; see the report | 2 critical findings, fixed | GitHub ↗ |
Findings101
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 6 |
| High | 0 | 0 | 11 |
| Medium | 0 | 4 | 18 |
| Low | 0 | 26 | 36 |
CriticalcarryVoteForward() enables double votingKittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportCriticalIncentive rewards may be stolenKittenSwap security review · Pashov Audit Group · 21 Jun 2025Fixed
The report gives no description here.
Open the reportCriticalLack of lastMintedPeriod update allows unlimited minting of KittenKittenSwap security review · Pashov Audit Group · 21 Jun 2025Fixed
The report gives no description here.
Open the reportCriticalRebaseReward fails because of incorrect token handlingKittenSwap security review · Pashov Audit Group · 21 Jun 2025Fixed
The report gives no description here.
Open the reportCriticalCLGauge sends KITTEN rewards to itself instead of to stakersKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportCriticalsplit can be abused to create locked data with an arbitrary amountKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportHighPermissionless voting through Voter::carryVoteForward()KittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportHighRepeated distributions for killed gauges can block valid distributionsKittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportHighReward rates can be reset to 0 and future rewards can be stolen from votersKittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportHighvotingReward not set on GaugeKittenSwap security review · Pashov Audit Group · 21 Jun 2025Fixed
The report gives no description here.
Open the reportShow 10 more
HighDuplicate tokenId in delegate list may inflate votesKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportHighExternalBribe.earned skips rewards before the last tokenId checkpointKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportHighInconsistent rounding of lock time causes voting power errorsKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportHighIncorrect last_point.blk calculation due to shared memory in _checkpoint()KittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportHighIncorrect next epoch supply usage affects reward calculationKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportHighLack of access control in CLGauge creation allows unauthorized PoolsKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportHighLoss of claimable rewards upon gauge deactivationKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportMediumcarryVoteForward() violates vote immutabilityKittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportMediumCommunity fees wasted if no voters in claimAndDistributeAlgebraPoolFees()KittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportMediumEmissions stuck if Voter.notifyRewardAmount() is called without votersKittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportShow 10 more
MediumAccrued fees become stuck when gauge is killedKittenSwap security review · Pashov Audit Group · 21 Jun 2025Fixed
The report gives no description here.
Open the reportMediumRewards from RebaseReward unclaimable after veKITTEN changesKittenSwap security review · Pashov Audit Group · 21 Jun 2025Fixed
The report gives no description here.
Open the reportMediumcheckpoint.timestamp inside VotingEscrow never usedKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportMediumDesync lets bribes be received without emissionsKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportMediumDOS attack by delegating tokens at MAX_DELEGATES = 1024KittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportMediumIncorrect check inside CLGauge.claimFeesKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportMediumMerging or withdrawing VotingEscrow burns tokens without rewardsKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportMediumMissing rescue reward function in Gauge, CLGauge, BribesKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportMediumPotential revert in earned() when checkpoint supply is zeroKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportMediumsplit() mints NFTs to msg.sender not the original ownerKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportShow 10 more
MediumUser can prevent poke() from updating voting powerKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportMediumVotingEscrow._burn prevents approved spender from using withdraw()KittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportMediumVotingEscrow.withdraw cannot be called by an approved tokenId spenderKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportMediumWeight loss possible due to invalid pool votes in _vote()KittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportMediumWrong supply accounting in merge functionKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportLow_createGauge() allows overwriting an existing gaugeKittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowclaimAndDistributeAlgebraPoolFees() may revert on zero transfer failureKittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowclaimVotingRewardBatch() allows early claims, missing rewardsKittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowEmission dust gets stuck due to rounding in _distribute()KittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowExpired locks can bypass expiry restriction via split() , regaining voting powerKittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowFee claiming and reward distribution continues for dead gaugesKittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowMalicious actor and zero emissions cause DoS in distributeAll()KittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowMissing storage __gap in Voter which is upgradeable contractKittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowRewards can be distributed early with _distribute()KittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowRounding down in split() function causes dust token loss.KittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowSome contracts not following UUPS best practicesKittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowsplit assigns max lock time to child NFTs , possibly locking fundsKittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowsplit() function double-counts locks amounts in supplyKittenSwap security review · Pashov Audit Group · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowGauge is not updated before killingKittenSwap security review · Pashov Audit Group · 21 Jun 2025Fixed
The report gives no description here.
Open the reportLowGauge rewards not distributed when total supply is zeroKittenSwap security review · Pashov Audit Group · 21 Jun 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowGauge still can be used after killing itKittenSwap security review · Pashov Audit Group · 21 Jun 2025Fixed
The report gives no description here.
Open the reportLowMissing gap in Reward contractKittenSwap security review · Pashov Audit Group · 21 Jun 2025Fixed
The report gives no description here.
Open the reportLowMissing setter for rebase rate in MinterKittenSwap security review · Pashov Audit Group · 21 Jun 2025Fixed
The report gives no description here.
Open the reportLowMissing token recovery function in Gauge, VotingReward and RebaseRewardKittenSwap security review · Pashov Audit Group · 21 Jun 2025Fixed
The report gives no description here.
Open the reportLowRewards may become locked in VoterKittenSwap security review · Pashov Audit Group · 21 Jun 2025Fixed
The report gives no description here.
Open the reportLowUnsafe transfer in CLGauge.transferERC20()KittenSwap security review · Pashov Audit Group · 21 Jun 2025Fixed
The report gives no description here.
Open the reportLowUser cannot claim reward if his lock is expiredKittenSwap security review · Pashov Audit Group · 21 Jun 2025Fixed
The report gives no description here.
Open the reportLowCalling notifyRewardAmount for unsupported tokens can grief gaugeKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportLowCLGauge should use ERC721HolderUpgradeable instead of ERC721HolderKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportLowCLGauge.earned could revert due to reward growth underflowKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowGauge may receive rewards for period it was dead when revivedKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportLowInconsistent DOMAIN_TYPEHASHKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportLowInitializer pattern in ClFactory lacks upgrade, risks frontrunningKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportLowIrreversible whitelisting of tokensKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportLowLack of _disableInitializers in upgradeable contractsKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportLowNo revert in ownerOf() for non- existent token IDsKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportLowPotential liquidity overflowKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportLowRedundant check for _votes in _reset() functionKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportLowReward calculation reverts due to potential arithmetic overflowKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportLowUsers can create NFTs with 0 locked amount through split functionKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportShow 1 more
LowUsers can deposit NFTs into killed CL gaugesKittenSwap security review · Pashov Audit Group · 22 May 2025Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="kittenswap"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us