Ball security record

Polygon (POS)polypup.finance

As of 3 Nov 2026, Ball has 3 audit reports by 1 security firm on Trustblock; the latest is by Paladin, dated 25 Sep 2021. Those reports list no open critical findings. It also holds 3 deployed contracts on 1 chain.

Critical findings
No open critical findings
Across 3 reports.
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.

Audits3

Newest first

AuditSecurity firmDateScopeCritical findingsReport
Audit ReportSecurity firm: PaladinDate: Scope: 1 address on Polygon (POS)No open critical findingsOpen · paladinsec.co
Audit ReportSecurity firm: PaladinDate: Scope: 2 addresses on Polygon (POS)No open critical findingsOpen · paladinsec.co
Audit ReportSecurity firm: PaladinDate: Scope: Not recorded (see the report)No open critical findingsOpen · paladinsec.co

Findings32

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical000
High002
Medium004
Low0323
HighPurchasers can use a contract to purchase a given token IDAudit Report · Paladin · 25 Sep 2021Fixed

The report gives no description here.

Open the report
HighSeverely excessive rewards issue when a token with a transfer tax is addedAudit Report · Paladin · 29 Jul 2021Fixed

The report gives no description here.

Open the report
MediumEntropy of the random ID generation is lowAudit Report · Paladin · 25 Sep 2021Fixed

The report gives no description here.

Open the report
MediumToken owner can stop transfers at any timeAudit Report · Paladin · 25 Sep 2021Fixed

The report gives no description here.

Open the report
MediumSetting feeAddress to the zero address will break most functionalityAudit Report · Paladin · 29 Jul 2021Fixed

The report gives no description here.

Open the report
MediumStartBlock cannot be adjusted after pools have been addedAudit Report · Paladin · 29 Jul 2021Fixed

The report gives no description here.

Open the report
LowCommented-out functions may mislead usersAudit Report · Paladin · 25 Sep 2021Fixed

The report gives no description here.

Open the report
Lowconsole.sol is imported but not usedAudit Report · Paladin · 25 Sep 2021Fixed

The report gives no description here.

Open the report
Lowdeveloper can be made immutableAudit Report · Paladin · 25 Sep 2021Fixed

The report gives no description here.

Open the report
LowGas inefficiency: SafeMath is redundant in Solidity v0.8.4Audit Report · Paladin · 25 Sep 2021Fixed

The report gives no description here.

Open the report
Show 10 more
LowLack of events for startSale and setBaseURIAudit Report · Paladin · 25 Sep 2021Fixed

The report gives no description here.

Open the report
LowownerToIds and idToOwnerIndex variables, and the SaleBegins event are unusedAudit Report · Paladin · 25 Sep 2021Fixed

The report gives no description here.

Open the report
LowPayment using .transfer() assumes a fixed gas costAudit Report · Paladin · 25 Sep 2021Fixed

The report gives no description here.

Open the report
LowPhishing risks are present if the frontend is compromisedAudit Report · Paladin · 25 Sep 2021Fixed

The report gives no description here.

Open the report
LowSale-ended check is unnecessaryAudit Report · Paladin · 25 Sep 2021Fixed

The report gives no description here.

Open the report
LowBONUS_MULTIPLIER looks to be redundantAudit Report · Paladin · 3 Sep 2021Fixed

The report gives no description here.

Open the report
LowContract uses raw subtractionAudit Report · Paladin · 3 Sep 2021Fixed

The report gives no description here.

Open the report
Lowmint function can be used to pre-mint large amounts of tokens before ownership is transferred to the MasterchefAudit Report · Paladin · 3 Sep 2021Fixed

The report gives no description here.

Open the report
LowRounding vulnerability to tokens with a very large supply can cause large supply tokens to receive zero emissionsAudit Report · Paladin · 3 Sep 2021Fixed

The report gives no description here.

Open the report
LowSetting devAddr to the zero address will break the deposit and withdraw functionsAudit Report · Paladin · 3 Sep 2021Fixed

The report gives no description here.

Open the report
Show 9 more
LowupdateEmissionRate has no maximum safeguardAudit Report · Paladin · 3 Sep 2021Fixed

The report gives no description here.

Open the report
Lowadd, set, deposit, withdraw, emergencyWithdraw, updateEmissionRate and setFeeAddress can be made externalAudit Report · Paladin · 29 Jul 2021Fixed

The report gives no description here.

Open the report
LowAdding an EOA or a non-token contract as a pool will break updatePool and massUpdatePoolsAudit Report · Paladin · 29 Jul 2021Fixed

The report gives no description here.

Open the report
LowdelegateBySig can be frontrun and cause denial of serviceAudit Report · Paladin · 29 Jul 2021Fixed

The report gives no description here.

Open the report
Lowdev function can be renamed and made externalAudit Report · Paladin · 29 Jul 2021Fixed

The report gives no description here.

Open the report
LowLack of events for add, set and updateStartBlockAudit Report · Paladin · 29 Jul 2021Fixed

The report gives no description here.

Open the report
Lowmint function can be used to pre-mint large amounts of tokens before ownership is transferred to the MasterchefAudit Report · Paladin · 29 Jul 2021Fixed

The report gives no description here.

Open the report
LowPools use the contract balance to figure out the total depositsAudit Report · Paladin · 29 Jul 2021Fixed

The report gives no description here.

Open the report
LowThe pendingBall function will revert if totalAllocPoint is zeroAudit Report · Paladin · 29 Jul 2021Fixed

The report gives no description here.

Open the report

Contracts3

AddressChainSource code
0xdabdf071635df85e87cb5b531c4db448a0f0ce21Chain: Polygon (POS)Source code: Verified source
0x8df26a1bd9bd98e2ec506fc9d8009954716a05dcChain: Polygon (POS)Source code: Verified source
0xe19f2634524dd1455193cf21572a09f7157f431dChain: Polygon (POS)Source code: Verified source

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
<div
data-tb-project-widget
data-tb-project-slug="polypup-ball"
></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us