Sculptor Finance security record
As of 3 Nov 2026, Sculptor Finance has 1 audit report on Trustblock, by Paladin, dated 13 Jun 2022. That report lists no open critical findings. It also holds 5 deployed contracts on 1 chain.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Audit Report (Staking) | Security firm: Paladin | Date: | Scope: 5 addresses on BNB Chain | No open critical findings | Open · paladinsec.co |
Findings43
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 6 |
| Medium | 3 | 1 | 4 |
| Low | 1 | 19 | 9 |
HighEach MasterChef pool requires their own incentives controllerAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportHighMultiFeeDistribution contract does not have a function that matches the interface lockedBalancesAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportHighonwardIncentives call in emergencyWithdraw is vulnerable to gas griefing which potentially allows the user to amplify onwardIncentives rewardsAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportHighonwardIncentives lacks quality and its interface does not match the ChefIncentivesController handleAction functionAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportHighPair value can be significantly manipulated to sell to the protocol in a sandwich attackAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportHighunlockDuration relocks claiming for all receivers instead of just the receiver who called claimAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportMediumChecks-effects-interactions is not adhered to throughout the contract, allowing for reward tokens to be stolen in case a token permits reentrancyAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportMediumDeposits do not support tokens with a fee on transferAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportMediumhandleAction is not compliant with the onwardIncentives interface and pases a strange parameter to the functionAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportMediumSeveral functions lack nonReentrantAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportShow 9 more
LowChecks-effects-interactions is not adhered toAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportLowfor loop in constructor underflowsAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportLowGov privilege: User stakes could become locked if governance sets a bad onwardIncentives for a poolAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportLowhandleAction() is callable by anyoneAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportLowLack of event for addPoolAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportLowLack of events for start, claim and constructor vester addingAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportLowMinor errors, gas optimizations and improvementsAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportLowPurchases round in favor of the userAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportLowRounding vulnerability to tokens with a very large supply can cause large supply tokens to receive zero emissionsAudit Report (Staking) · Paladin · 13 Jun 2022Fixed
The report gives no description here.
Open the reportContracts5
| Address | Chain | Source code |
|---|---|---|
| 0xe482676c4daa5156178c2e693c38e937521e9656 | Chain: BNB Chain | Source code: Verified source |
| 0xd4f7f739488f5c9930a60e85afbe26a8b71ba795 | Chain: BNB Chain | Source code: Verified source |
| 0x19a392f8fa8ffee07106200236f5b7078860d51c | Chain: BNB Chain | Source code: Verified source |
| 0x18542eee45272a29bc572f0edb727da4e3506dd2 | Chain: BNB Chain | Source code: Verified source |
| 0xad3e02e83b886543d1171ff446c130d52068c106 | Chain: BNB Chain | Source code: Verified source |
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="sculptor"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us