As of 14 Oct 2026, Labrado has 1 audit report on Trustblock, by CertiK, dated 17 Oct 2022. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Statuses are the security firms’ own. Trustblock does not review code.
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Labrado - Audit | Security firm: CertiK | Date: | Scope: Files named in the report | 1 critical finding, fixed | Open · skynet.certik.com |
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 1 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 6 | 0 | 3 |
According to the codes in the contract `LabradoOperator`, the users can use the function `depositToken()` for the deposit of ERC20 tokens or native tokens, which transfers the tokens to the address `operatorWalletTokens` directly, and can use the function `depositNFT()` for the NFT deposit, which transfers the NFT to the address `operatorWalletNFTs` directly. These deposits are not recorded in the contract and there are no functions to withdraw the users' ERC20 tokens, native tokens, and NFTs.
Open the reportAccording to the protocol, the variables `openSwap` and `openAddLiquidity` are used to limit whether anyone can use the swap and add liquidity functions. These variables can be updated by the privileged roles. The `Labrado` is a decentralized crypto trading protocol and may be used by other contracts as a third-party dependency. When the two variables are false, some logic in the contracts depended on the swap and add liquidity functions may fail. For examples: 1. In Deflationary Tokens(like SafeMoon), accumulated transfer fees will be used to add liquidity in the call of transfer. In this condition, the add liquidity function is forbidden and the call of transfer will fail. 2. In some DeFi protocols, the contract may call the swap function to swap tokens to match their logic. In this condition, the swap function is forbidden and the logic in these contracts may fail to execute.
Open the report`public` functions that are never called by the contract could be declared as `external`. `external` functions are more efficient than `public` functions.
Open the reportThe function `setupFeeSwap()` is used to change the value of variable `feeSwap`, which is used to calculated the fee in swap. The variable `feeSwap` does not have a reasonable boundary, so it can be given up to 999 after deploying, which means the fee charged on swapping could be 99.9%.
Open the reportThe contract has unlocked compiler version. An unlocked compiler version in the source code of the contract permits the user to compile it at or above a particular version. This, in turn, leads to differences in the generated bytecode between compilations due to different compiler versions. This can lead to an ambiguity when debugging as compiler specific bugs may occur in the codebase that would be hard to identify over a span of multiple compiler versions rather than a specific one.
Open the reportThe library is never used in the project.
Open the reportThe reports name a repository or files. Open a report to see its scope.
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="labrado"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us