Wallchain security record
As of 3 Nov 2026, Wallchain has 3 audit reports by 1 security firm on Trustblock; the latest is by Paladin, dated 13 Sep 2023. Those reports list no open critical findings. It also holds 6 deployed contracts on 2 chains.
Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Audits3
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Wallchain (Meta Intents) | Security firm: Paladin | Date: | Scope: 2 addresses on Polygon (POS) and BNB Chain | No open critical findings | Open · IPFS |
| Wallchain MetaSwapWrapper | Security firm: Paladin | Date: | Scope: 2 addresses on Polygon (POS) and BNB Chain | No open critical findings | Open · IPFS |
| WallChain Paraswap Augustus Wrapper | Security firm: Paladin | Date: | Scope: 2 addresses on Polygon (POS) and BNB Chain | No open critical findings | Open · IPFS |
Findings37
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 6 |
| Medium | 0 | 1 | 6 |
| Low | 0 | 2 | 21 |
HighGas refund logic is fundamentally flawedWallchain (Meta Intents) · Paladin · 13 Sep 2023Fixed
The report gives no description here.
Open the reportHighNonce logic is broken due to incorrect truncation, causing many nonces to point to the same storage slotWallchain (Meta Intents) · Paladin · 13 Sep 2023Fixed
The report gives no description here.
Open the reportHighContract structure allows for an exploiter to drain all open approvals to the MetaSwapWrapperWallchain MetaSwapWrapper · Paladin · 4 May 2023Fixed
The report gives no description here.
Open the reportHighExcess fromToken might get stuck during simpleBuy and buyWallChain Paraswap Augustus Wrapper · Paladin · 21 Jan 2023Fixed
The report gives no description here.
Open the reportHighThe contract does not work with permitWallChain Paraswap Augustus Wrapper · Paladin · 21 Jan 2023Fixed
The report gives no description here.
Open the reportHighThe use of tx.origin is a risky approachWallChain Paraswap Augustus Wrapper · Paladin · 21 Jan 2023Fixed
The report gives no description here.
Open the reportMediumLow-level call is vulnerable to return-bomb griefing, which causes the searcher call to use significantly more gas than the desired provided gasWallchain (Meta Intents) · Paladin · 13 Sep 2023Fixed
The report gives no description here.
Open the reportMediumVarious calls are not gas-limitedWallchain (Meta Intents) · Paladin · 13 Sep 2023Fixed
The report gives no description here.
Open the reportMediumETH to ETH wrapped transactions will fully failWallchain MetaSwapWrapper · Paladin · 4 May 2023Fixed
The report gives no description here.
Open the reportMediumUsers will lose value through many router interactions including transferTokensForExactTokens due to input dust being stuck in the wrapperWallchain MetaSwapWrapper · Paladin · 4 May 2023Fixed
The report gives no description here.
Open the reportShow 10 more
MediumAnyone can withdraw tokens transferred to the contractWallChain Paraswap Augustus Wrapper · Paladin · 21 Jan 2023Fixed
The report gives no description here.
Open the reportMediumInfinite approval is granted to the Paraswap ProxyWallChain Paraswap Augustus Wrapper · Paladin · 21 Jan 2023Fixed
The report gives no description here.
Open the reportLowContract does not implement OwnableWallchain (Meta Intents) · Paladin · 13 Sep 2023Fixed
The report gives no description here.
Open the reportLowGas optimizationWallchain (Meta Intents) · Paladin · 13 Sep 2023Fixed
The report gives no description here.
Open the reportLowGas optimizationsWallchain (Meta Intents) · Paladin · 13 Sep 2023Fixed
The report gives no description here.
Open the reportLowGas optimizationsWallchain (Meta Intents) · Paladin · 13 Sep 2023Fixed
The report gives no description here.
Open the reportLowOwnable and SafeERC20 are unusedWallchain (Meta Intents) · Paladin · 13 Sep 2023Fixed
The report gives no description here.
Open the reportLowThe contract is inconsistent with the usage of requirements and if- error reversionsWallchain (Meta Intents) · Paladin · 13 Sep 2023Fixed
The report gives no description here.
Open the reportLowTypographical issueWallchain (Meta Intents) · Paladin · 13 Sep 2023Fixed
The report gives no description here.
Open the reportLowTypographical issuesWallchain (Meta Intents) · Paladin · 13 Sep 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowTypographical issuesWallchain (Meta Intents) · Paladin · 13 Sep 2023Fixed
The report gives no description here.
Open the reportLowTypographical issuesWallchain (Meta Intents) · Paladin · 13 Sep 2023Fixed
The report gives no description here.
Open the reportLowContract does not work for non-compliant ERC20 tokens like USDT on EthereumWallchain MetaSwapWrapper · Paladin · 4 May 2023Fixed
The report gives no description here.
Open the reportLowContract might not work for non-EOA sendersWallchain MetaSwapWrapper · Paladin · 4 May 2023Fixed
The report gives no description here.
Open the reportLowGas optimizationsWallchain MetaSwapWrapper · Paladin · 4 May 2023Fixed
The report gives no description here.
Open the reportLowLack of validationWallchain MetaSwapWrapper · Paladin · 4 May 2023Fixed
The report gives no description here.
Open the reportLowTypographical errorsWallchain MetaSwapWrapper · Paladin · 4 May 2023Fixed
The report gives no description here.
Open the reportLowwithdrawETH might fail due to the use of transfer instead of callWallchain MetaSwapWrapper · Paladin · 4 May 2023Fixed
The report gives no description here.
Open the reportLowGas optimizationsWallChain Paraswap Augustus Wrapper · Paladin · 21 Jan 2023Fixed
The report gives no description here.
Open the reportLowLack of events for withdrawEth and withdrawAllWallChain Paraswap Augustus Wrapper · Paladin · 21 Jan 2023Fixed
The report gives no description here.
Open the reportShow 3 more
LowThe receivedAmount includes the feeWallChain Paraswap Augustus Wrapper · Paladin · 21 Jan 2023Fixed
The report gives no description here.
Open the reportLowTypographical errorsWallChain Paraswap Augustus Wrapper · Paladin · 21 Jan 2023Fixed
The report gives no description here.
Open the reportLowupgradeMaster missing safeguard to address(0)WallChain Paraswap Augustus Wrapper · Paladin · 21 Jan 2023Fixed
The report gives no description here.
Open the reportContracts6
| Address | Chain | Source code |
|---|---|---|
| 0xfaa746afc5ff7d5ef0aa469bb26ddd6cd8f13911 | Chain: Polygon (POS) | Source code: Verified source |
| 0xfaa746afc5ff7d5ef0aa469bb26ddd6cd8f13911 | Chain: BNB Chain | Source code: Verified source |
| 0x4def20e7dbfeab6b2cfeb53bdca28a6dced12317 | Chain: BNB Chain | Source code: Verified source |
| 0x4def20e7dbfeab6b2cfeb53bdca28a6dced12317 | Chain: Polygon (POS) | Source code: Verified source |
| 0xc0ffee00c3f5a11369eeb57693c56fd939dc6dbb | Chain: BNB Chain | Source code: Verified source |
| 0xc0ffee00c3f5a11369eeb57693c56fd939dc6dbb | Chain: Polygon (POS) | Source code: Verified source |
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="wallchain"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us