Palpitada security record
As of 1 Nov 2026, Palpitada has 1 audit report on Trustblock, by Nethermind Security, dated 3 Apr 2026. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Palpitada security review | Security firm: Nethermind Security | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
Findings21
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 7 |
| Low | 0 | 0 | 12 |
Marked Info or Best Practices by the firms. Not counted as findings.
InfoCurator fees are not subject to token-based fee discountsPalpitada security review · Nethermind Security · 3 Apr 2026Acknowledged
The report gives no description here.
Open the reportInfoFee discount can be obtained via flash-loaned tokensPalpitada security review · Nethermind Security · 3 Apr 2026Acknowledged
The report gives no description here.
Open the reportBest PracticesThe depositUSDC(...) function is redundantPalpitada security review · Nethermind Security · 3 Apr 2026Acknowledged
The report gives no description here.
Open the reportInfoThe executeMultisigOperation(...) function bypasses initialization checks for marketFactoryPalpitada security review · Nethermind Security · 3 Apr 2026Acknowledged
The report gives no description here.
Open the reportBest Practices_cancel() in OrderbookMarket does not require ACTIVE statusPalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportInfo18-to-6 decimal truncation in sellPosition can burn shares for zero USDCPalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportInfoEIP-2612 permit flow in predict(...) is broken for users with credit balancesPalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportBest PracticesEnum types lack a default sentinel value for uninitialized statePalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportBest PracticesFee configuration allows setting topicRate to zero after registrationPalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportInfoHardcoded magic numbers used throughout the codebasePalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportShow 10 more
InfoImplementation contracts can be initialized by anyonePalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportInfoInconsistent msg.sender vs _msgSender() usage in CreditManager’s onlyAuthorized modifierPalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportInfoInconsistent validation for protocolFee between initialize(...) and _- setProtocolFee(...)Palpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportInfoisRedeemOrderValid returns false for cancelled markets despite executeRedeem succeedingPalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportInfoMarket hard-codes a 6-decimal token assumption via DECIMAL_MULTIPLIERPalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportInfoMarketFactory owner storage variable has no setter preventing rotation for market ownershipPalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportInfoMAX_SHARES overflow guard is not compatible with the allowed liquidityParameter rangePalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportInfominimumOrderAmount stored but never enforcedPalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportInfoNo combined ceiling on protocolFee + curatorFeePalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportBest PracticesNo mechanism to deauthorize markets from CreditManagerPalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportShow 9 more
InfoNo on-chain order cancellation for regular ordersPalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportInfoNon-delayed operations invalidate pending delayed operations via shared noncePalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportBest PracticesNon-standard double-hash EIP-712Palpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportBest PracticesOrderbookFactory allows 100% protocol fee at market creationPalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportInfoOrderbookMarket emergency withdrawal has no timelockPalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportBest PracticesOrderbookMarket transferFrom silently no-ops for invalid token IDsPalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportBest PracticesState changes in the predict(...) function are ineffective due to an immediate revertPalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportInfoWinnerSet event is misleading when a draw is declaredPalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportBest PracticesWrong error emitted in withdrawCuratorFeesPalpitada security review · Nethermind Security · 3 Apr 2026Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="palpitada"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us