background
logo

Security Audit Report for Magpie Radpie

專案簡介

Magpie launched Radpie, a yield optimization protocol built upon Radiant. Users could deposit their assets on Radpie to earn enhanced yields.

This audit only covers the contracts listed in the report from the code repository. The iterative audit covers the code in the initial version, as well as subsequent versions to fix discovered issues, as detailed in our audit report. During this audit, our presumption is that the dependencies from Radiant are both reliable and secure and therefore excluded from this audit scope.

Our audit methodology employs automated vulnerability scans, manual verification, and business logic analysis to uncover potential security issues coupled with gas and code quality optimization recommendations.

In summary, we have found that the codebase contains several high-risk issues that require prompt attention. In addition, we have identified other non-critical issues as well as security suggestions that should be considered. The Magpie team has addressed the discovered issues promptly. It is important to note that our audit covers only the final reported versions of the codebase. Any subsequent updates would require a re-evaluation.

關鍵發現

我們在該智能合約中共發現 13 個潛在問題,另有 5 條建議與 7 條說明,明細如下:

高風險:5
中風險:6
低風險:2
建議:5
說明:7
ID Severity Description Category Status
1 High Inconsistent address parameter Software Security Fixed
2 High Potential reverts in the _refundETH function Software Security Fixed
3 High Incorrect parameter in the _harvestDlpRewards function Software Security Fixed
4 Medium Incorrect return value of the assetPerShare function Software Security Fixed
5 Low Potential DoS risk in the claim function Software Security Confirmed
6 Low Potential overwriting on existing poolInfo Software Security Fixed
7 High Double-counting rewards DeFi Security Fixed
8 High Incorrect _onlyWhiteListed modifier DeFi Security Fixed
9 Medium Lack of duplicate checks for function arguments DeFi Security Fixed
10 Medium Incorrect fee removal logic DeFi Security Confirmed
11 Medium Lack of sanity check on total fee DeFi Security Confirmed
12 Medium Unclaimable rewards due to rewarder modification DeFi Security Fixed
13 Medium Lack of health check DeFi Security Fixed
14 - Remove unused variable Recommendation Fixed
15 - Remove redundant check in the \_sendRewards function Recommendation Fixed
16 - Prevent multiple native tokens Recommendation Fixed
17 - Prevent accidental native token transfers Recommendation Fixed
18 - Avoid incorrect assignment Recommendation Fixed
19 - The protocol will not support deflation/inflation tokens Note -
20 - Potential centralization risk Note -
21 - Periodic invocation of batchHarvestDlpRewards Note -
22 - Periodic invocation of batchHarvestEntitledRDNT Note -
23 - Ensure initial TVL in RadiantStaking pools Note -
24 - The initialization of vdToken balance Note -
25 - Periodic invocation of accrueStreamingFee Note -

更多細節見審計報告

邁出走向安全的第一步

立即聯絡我們,獲取 BlockSec 的專業程式碼審計服務,在協議上線之前把安全性提上來!

Security Audit Report for Magpie Radpie - BlockSec