Vesq Presale security record
As of 3 Nov 2026, Vesq Presale has 2 audit reports by 1 security firm on Trustblock; the latest is by Paladin, dated 10 Dec 2021. Those reports list no open critical findings. It also holds 15 deployed contracts on 1 chain.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Audits2
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Audit Report | Security firm: Paladin | Date: | Scope: 15 addresses on Polygon (POS) | No open critical findings | Open · paladinsec.co |
| Audit Report | Security firm: Paladin | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · paladinsec.co |
Findings67
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 3 |
| Medium | 0 | 0 | 3 |
| Low | 3 | 7 | 51 |
HighGov Privilege: Governance can change crucial aspects of the protocol to potentially drain the contracts of all supplied tokensAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportHighStaked amount is relocked on subsequent stakes, even if the stake is made by third-parties allowing for targeted Denial of ServiceAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportHighVested amount is relocked on deposit, even if the deposit is made by third-parties allowing for targeted Denial of ServiceAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportMediumDoes not support LP pairs where the second currency has less than 9 decimalsAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportMediumThe last owner can be reclaimed across multiple contractsAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportMedium1e9 multiplier is inconsistent with VSQPresaleAudit Report · Paladin · 1 Dec 2021Fixed
The report gives no description here.
Open the reportLow_burnFrom is marked as publicAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowAdding a token as both a liquidity and reserve token would cause it to be double counted in the treasury valueAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowAdjustment target is never reachedAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowAdjustment target is never reachedAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportShow 10 more
LowAdjustments are not reset when recipient is removedAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowbondPriceInUSD is denominated in the decimals of the other token in the LP and might not be correct for non stablecoin LPsAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowContract could theoretically run out of VSQAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowContract does not work with a zero vestingTermAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowDeposit is vulnerable to reentrancy if the principle has a reentrancy vectorAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowDOMAIN_SEPARATOR can be made immutableAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowGas optimization: Usage of decimals as a precision multiplierAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowInconsistency: Unused mint function emits an event from address(this) while the mint logic during initialization emits an event from the zero addressAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowInfrequent rebases incentivize malicious parties to strategically (re)order transactions for arbitrage and steal all rebased tokens off the LP pairsAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowinitializeBondTerms has no validationAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportShow 10 more
LowLack of events for various functionsAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowLack of safeTransfer usage within incurDebtAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowLack of validationAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowLock logic might be wrongly definedAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowManage will always do an excessReserve check even if the token is not within the liquidity or reserves tokensAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowMarkdown will misbehave if an LP with two non-VSQ tokens is providedAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowNew owner variable is privateAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowpermit can be frontrun and cause denial of serviceAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowPhishing: Frontend could trick users into sending too much MATIC for depositsAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowpriceFeed is internalAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportShow 10 more
LowRebases can be arbitraged/frontranAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowrepayDebtWithVSQ has inconsistent privilege requirements which allows for slight privilege escalationAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowReserve value mechanism could cause withdrawals and other operations to temporarily failAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowStandardBondingCalculator can only value pairs in which the two tokens have equal “value”Audit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowswapData can be denoted as calldata throughout the contractAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowThe contracts become unusable in the year 2106Audit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowThe contracts do not work with reflective tokensAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowThe maximum debt can be exceeded by at most maxPayoutAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowThe protocol will likely malfunction if ChainLink feeds for MATIC will be different than 8 decimalsAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowTransactionless approval permit mechanism still references zero swapAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportShow 10 more
LowTypographical errorsAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowUnbounded gas usage due to extensive for-loop usageAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowUnnecessary comparison to true on withdraw functionAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowUnused variables/dependencies throughout the contractsAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowUsage of transferFrom/transfer instead of safeTransferFrom/ safeTransferAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowVarious functions can be made externalAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowVault can be set to the zero addressAudit Report · Paladin · 10 Dec 2021Fixed
The report gives no description here.
Open the reportLowContract only works for specific token configurationsAudit Report · Paladin · 1 Dec 2021Fixed
The report gives no description here.
Open the reportLowCurrent per wallet limit scheme incentivizes users to wait until the very end of the presaleAudit Report · Paladin · 1 Dec 2021Fixed
The report gives no description here.
Open the reportLowErroneous usage of assertAudit Report · Paladin · 1 Dec 2021Fixed
The report gives no description here.
Open the reportShow 7 more
LowError message in sendUnclaimedsToTreasuryAddress states that it is going to burn the tokensAudit Report · Paladin · 1 Dec 2021Fixed
The report gives no description here.
Open the reportLowLack of constructor validationAudit Report · Paladin · 1 Dec 2021Fixed
The report gives no description here.
Open the reportLowLack of constructor validationAudit Report · Paladin · 1 Dec 2021Fixed
The report gives no description here.
Open the reportLowLack of constructor validationAudit Report · Paladin · 1 Dec 2021Fixed
The report gives no description here.
Open the reportLowOdd contract layoutAudit Report · Paladin · 1 Dec 2021Fixed
The report gives no description here.
Open the reportLowsendUnclaimedsToTreasuryAddress does not adhere to checks- effects-interactionsAudit Report · Paladin · 1 Dec 2021Fixed
The report gives no description here.
Open the reportLowUnnecessary precision multiplierAudit Report · Paladin · 1 Dec 2021Fixed
The report gives no description here.
Open the reportContracts15
| Address | Chain | Source code |
|---|---|---|
| 0x2f3e9e54bd4513d1b49a6d915f9a83310638cfc2 | Chain: Polygon (POS) | Source code: Verified source |
| 0xbb0fdc2fe6d3ceb6bf76cc955173a07edbf57494 | Chain: Polygon (POS) | Source code: Verified source |
| 0xabe372dcfb8800b3cde30f1d6666401c765f2f3b | Chain: Polygon (POS) | Source code: Verified source |
| 0xf4acbe9de1fae931c5a67115184069474d4fadad | Chain: Polygon (POS) | Source code: Verified source |
| 0x8ab125d6d6ea1743e53ca79595046f2a0c76a551 | Chain: Polygon (POS) | Source code: Verified source |
| 0x9fd78920cdbe6f365a557cec282cc88152e35670 | Chain: Polygon (POS) | Source code: Verified source |
| 0x6fd68930ec828ec5906b0fdec686f3f459c08d1a | Chain: Polygon (POS) | |
| 0xe33e7247bdf5fdeb6705e820f3f26823ea294f13 | Chain: Polygon (POS) | Source code: Verified source |
| 0x5aec30afe641ebe8789d8b21223f6d2c74f6fe2c | Chain: Polygon (POS) | Source code: Verified source |
| 0x29f1e986fca02b7e54138c04c4f503dddd250558 | Chain: Polygon (POS) | Source code: Verified source |
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="vesq-presale"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us