Paladin security record
As of 21 Oct 2026, Paladin has 1 audit report on Trustblock, by Cyfrin, dated 12 Mar 2025. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Valkyrie Audit Report | Security firm: Cyfrin | Date: | Scope: Not recorded (see the report) | 3 critical findings, fixed | Open · GitHub |
Findings26
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 3 |
| High | 0 | 1 | 8 |
| Medium | 0 | 2 | 5 |
| Low | 0 | 0 | 7 |
CriticalPermissionless reward distribution can be abused to cause full denial of service and loss of funds for poolsValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportCriticalpoolRewards arrays can grow without bounds, resulting in DoS of core functionalityValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportCriticalReward tokens can become inaccessible due to revert when rewardPer- TokenStored is downcast and overflowsValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportHighDenial of service for swaps on MultiRangeHook poolsValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportHighManipulation of price outside of the FullRangeHook liquidity range can result in DoS and financial loss to liquidity providersValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportHighMissing user liquidity sync in TimeWeightedIncentiveLogic::_updateAllUserState can result in rewards becoming lockedValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportHighPrecision loss can result in funds becoming stuck in incentive logic contractsValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportHighReward distribution can be blocked by an initial distribution of long durationValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportHighRewards distributed with TimeWeightedIncentiveLogic can continue to be claimed after the distribution endsValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportHighSwaps are not possible on pools registered with Bunni due to incorrect access control in ValkyrieHooklet::afterSwapValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportShow 10 more
HighSwaps performed in pools with zero liquidity can cause a complete DoS of FullRangeHookValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportMediumDeposited rewards get stuck in incentive logic contracts when there is no pool liquidityValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportMediumIncentivizedERC20 should not be hardcoded to 18 decimalsValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportMediumMissing duplicate Incentive Logic can result in Incentive System accounting being brokenValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportMediumMissing slippage protection when removing liquidityValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportMediumTimeWeightedIncentiveLogic distributions are not possible for tokens that revert on zero transfersValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportLowInability to remove hooks and Incentive Systems from the Incentive ManagerValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportLowMisleading liquidity value returned when adding liquidityValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportLowMissing tick validation when creating a new range in MultiRangeHookValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportLowMissing zero address validation in BoostedIncentiveLogicValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportShow 3 more
LowPositions can be locked by malicious re-initialization in the event of multiple ValkyrieSubscriber contracts being deployedValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportLowUnsafe downcast in ValkyrieSubscriber::toInt256 could silently overflowValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportLowValue mistakenly sent to PoolCreator can be permanently lockedValkyrie Audit Report · Cyfrin · 12 Mar 2025Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="paladin"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us