Magpie XYZ security record
As of 21 Oct 2026, Magpie XYZ has 3 audit reports by 2 security firms on Trustblock; the latest is by Zokyo, dated 13 Jul 2023. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits3
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Penpie Smart Contracts Review | Security firm: Zokyo | Date: | Scope: Files named in the report | No open critical findings | Open · IPFS |
| Penpie Smart Contract Review | Security firm: Zokyo | Date: | Scope: Files named in the report | No open critical findings | Open · IPFS |
| Magpie: Magpie Protocol audit | Security firm: PeckShield | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
Findings58
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 4 |
| Medium | 2 | 0 | 7 |
| Low | 14 | 0 | 30 |
HighPossibility of Reentrance via vote()Penpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportHighExecution flow in _onlyWhiteListed modifier leaves modified function unexecutedPenpie Smart Contract Review · Zokyo · 22 Jun 2023Fixed
The report gives no description here.
Open the reportHighIncorrect Token Flow in withdraw()Magpie: Magpie Protocol audit · PeckShield · 28 Oct 2022Fixed
The report gives no description here.
Open the reportHighRevisited Logic in cancelUnlock()Magpie: Magpie Protocol audit · PeckShield · 28 Oct 2022Fixed
The report gives no description here.
Open the reportMediumCentralization risk in PendleVoteManagerPenpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportMediumCentralization risks in vlPenpiePenpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportMediumDenial of Service via setCoolDownInSecs()Penpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportMediumIncorrect use of modifierPenpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportMediumUnsafe Uint64 Casting in PendleVoteManagerPenpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportMediumImproved Quote Between depositToken and LPMagpie: Magpie Protocol audit · PeckShield · 28 Oct 2022Fixed
The report gives no description here.
Open the reportShow 10 more
MediumRevisited Logic To Distribute Caller FeeMagpie: Magpie Protocol audit · PeckShield · 28 Oct 2022Fixed
The report gives no description here.
Open the reportLowDeclaration of gap variablePenpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowIncorrect Natspec commentsPenpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowIncorrect usage of signPenpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowInit function call missingPenpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowLock SolidityPenpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowMissing forwarding of rewardsPenpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowMissing Reentrance init callPenpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowMissing zero address checksPenpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowRenounce OwnershipPenpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowReturned boolean value ignoredPenpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowUnnecessary redundant initialization of variablesPenpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowUnprotected initializer could be called by anyonePenpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowUnused modifierPenpie Smart Contracts Review · Zokyo · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowLack of Input Validation in addBonusRewardForAsset functionPenpie Smart Contract Review · Zokyo · 22 Jun 2023Fixed
The report gives no description here.
Open the reportLowMissing initialization of Reentrancy Guard Upgradeable ContractPenpie Smart Contract Review · Zokyo · 22 Jun 2023Fixed
The report gives no description here.
Open the reportLowMissing length check for rewarders array in harvestVePendleReward functionPenpie Smart Contract Review · Zokyo · 22 Jun 2023Fixed
The report gives no description here.
Open the reportLowMissing Reentrancy checks in internal methodsPenpie Smart Contract Review · Zokyo · 22 Jun 2023Fixed
The report gives no description here.
Open the reportLowMissing Reentrancy modifier in depositVlPenPieFor(...) and withdrawVlPenPierFor(...) methodsPenpie Smart Contract Review · Zokyo · 22 Jun 2023Fixed
The report gives no description here.
Open the reportLowRedundant use of `this` keyword in the function invocationsPenpie Smart Contract Review · Zokyo · 22 Jun 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowReuse code by adding a modifierPenpie Smart Contract Review · Zokyo · 22 Jun 2023Fixed
The report gives no description here.
Open the reportLowUnrestricted Reactivation of Markets with Null Rewarder Address in PendleMarketDepositHelper ContractPenpie Smart Contract Review · Zokyo · 22 Jun 2023Fixed
The report gives no description here.
Open the reportLowUnused imports, events, custom errors and modifiersPenpie Smart Contract Review · Zokyo · 22 Jun 2023Fixed
The report gives no description here.
Open the reportLowUnused removePoolInfo function in PendleStaking contractPenpie Smart Contract Review · Zokyo · 22 Jun 2023Fixed
The report gives no description here.
Open the reportLowUnutilized bonus reward tokens functionalityPenpie Smart Contract Review · Zokyo · 22 Jun 2023Fixed
The report gives no description here.
Open the reportLowUpgradeable contracts missing method to disable initializers for implementation contractsPenpie Smart Contract Review · Zokyo · 22 Jun 2023Fixed
The report gives no description here.
Open the reportLowUse specific Solidity compiler versionPenpie Smart Contract Review · Zokyo · 22 Jun 2023Fixed
The report gives no description here.
Open the reportLowWrong NatSpec comments.Penpie Smart Contract Review · Zokyo · 22 Jun 2023Fixed
The report gives no description here.
Open the reportLowZero address validation missing for setPendleStakingPenpie Smart Contract Review · Zokyo · 22 Jun 2023Fixed
The report gives no description here.
Open the reportLowAccommodation of Non-ERC20-Compliant TokensMagpie: Magpie Protocol audit · PeckShield · 28 Oct 2022Fixed
The report gives no description here.
Open the reportShow 1 more
LowImproved Sanity Checks For Function ParametersMagpie: Magpie Protocol audit · PeckShield · 28 Oct 2022Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="penpie"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us