PolyLime Finance security record

Polygon (POS)polylime.finance

As of 15 Oct 2026, PolyLime Finance has 1 audit report on Trustblock, by Paladin, dated 11 Nov 2021. That report lists no open critical findings. It also holds 4 deployed contracts on 1 chain.

Critical findings
No open critical findings
In 1 report.
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.

Audits1

Newest first

AuditSecurity firmDateScopeCritical findingsReport
Audit ReportSecurity firm: PaladinDate: Scope: 4 addresses on Polygon (POS)No open critical findingsOpen · paladinsec.co

Findings11

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium001
Low009
HighPossible integer overflow in mint require statement allows minting more than MAXCAPSUPPLYAudit Report · Paladin · 11 Nov 2021Fixed

The report gives no description here.

Open the report
Mediumpool.lpSupply is not modified by amount withdrawn in emergencyWithdrawAudit Report · Paladin · 11 Nov 2021Fixed

The report gives no description here.

Open the report
Lowdeposit and withdraw function calls will fail if the pending rewards to be minted causes the MAXCAP to exceed the max supplyAudit Report · Paladin · 11 Nov 2021Fixed

The report gives no description here.

Open the report
LowMAXCAP is private and cannot be read by other contracts such as the MasterchefAudit Report · Paladin · 11 Nov 2021Fixed

The report gives no description here.

Open the report
Lowmint function can be used to pre-mint large amounts of tokens before ownership is transferred to the MasterchefAudit Report · Paladin · 11 Nov 2021Fixed

The report gives no description here.

Open the report
Lowmsg.sender is unnecessarily cast to address(msg.sender)Audit Report · Paladin · 11 Nov 2021Fixed

The report gives no description here.

Open the report
LowpayReferralCommission will fail if the pending commission to be minted causes the MAXCAP to exceed the maximum supplyAudit Report · Paladin · 11 Nov 2021Fixed

The report gives no description here.

Open the report
LowpendingLime will show inaccurate pending harvests on the dapp frontend if the pending rewards causes MAXCAP to be exceed MAXSUPPLYCAPAudit Report · Paladin · 11 Nov 2021Fixed

The report gives no description here.

Open the report
LowPool uses the contract balance to figure out the total depositsAudit Report · Paladin · 11 Nov 2021Fixed

The report gives no description here.

Open the report
LowReferral addresses for users without referral records can be arbitrarily set by operatorAudit Report · Paladin · 11 Nov 2021Fixed

The report gives no description here.

Open the report
Show 1 more
LowState variables initialized in the constructor and never modified can be set to immutableAudit Report · Paladin · 11 Nov 2021Fixed

The report gives no description here.

Open the report

Contracts4

AddressChainSource code
0x4e4b149c226446f2d847a8809e7ec931e1a4dd6dChain: Polygon (POS)Source code: Verified source
0x95e0150d37a2b2f0d44ea0a0a0120a3aca69a41eChain: Polygon (POS)Source code: Verified source
0xfffb1781422cc18ab5786e3dbd55d7c91f9e5d9dChain: Polygon (POS)Source code: Verified source
0xe027ab31ea5568289c713ec6734b23e626ce4582Chain: Polygon (POS)Source code: Verified source

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
<div
data-tb-project-widget
data-tb-project-slug="polylime-finance"
></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us