Trader Joe

Project Information

Network

Arbitrum, Avalanche, BSC

Website

https://traderjoexyz.com/

Audit Report - Trader Joe MasterChefV3
Commissioned

28 Sep 2021

Completed

04 Oct 2021

Contracts Audited

SimpleRewarderPerSec SimpleRewarderPerSec.sol
MasterChefJoeV3 MasterChefJoeV3.sol

View Audit Report
Issues
Risk Summary

Found Resolved Partially Resolved Acknowledged
(no change made)

High 2 2 – –

Medium 2 2 – –

Low 4 4 – –

Informational 8 3 1 4

Total 16 11 1 4

When using this protocol, the main risks you want to look out for are:

Ensuring that the contracts you are interacting with matches the one we audited. This can be done by comparing the addresses with the one present in the contracts page in our audit.

Our audits only cover code-related risks. Users will have to do their own due diligence on other aspects of the protocol such as the reputation of the team, the protocol’s tokenomics, and other aspects of the project that might be relevant.

Issues Classification

Audit Report - Trader Joe Lending

Commissioned

24 Sep 2021

Completed

05 Oct 2021

Contracts Audited

PriceOracle	inherited by PriceOracleProxyUSD
PriceOracleProxyUSD	0xe34309613B061545d42c4160ec4d64240b114482
SimplePriceOracle	Not used
V1PriceOracle	Not used
Joetroller	0x1Ed8368Ca83437DbF43E50e85E6f82342e92CFCB
Unitroller	0xdc13687554205E5b89Ac783db14bb5bba4A1eDaC
RewardDistributor	0x2274491950B2D6d79b7e69b683b482282ba14885
FlashLoanLender	Not used
Exponential	Library
SafeMath	Library
CarefulMath	Library
ErrorReporter	Library
JumpRateModelV2	Not used
TripleSlopeRateModel	0xe6FfD92B9F77FBF5BfEc0F3D9c9d027C4CF3bA6e
	0x3C5486b85fAAE29B071F2a616a59cA7bF8F73682
	0x82Ea6f7bf853A199AB921137B119B6D41F08038e
JAvaxDelegator	0xC22F01ddc8010Ee05574028528614634684EC29e
JAvaxDelegate	0xd915Fdb10530eF2A8337B4b0bb33F1B0Bc015531
JUsdcDelegator	0xEd6AaF91a2B084bd594DBd1245be3691F9f637aC
JUsdcDelegate	0x737Fdfb2365973474beFA244953954c5B6Fddf34
JUsdtDelegator	0x8b650e26404AC6837539ca96812f0123601E4448
JUsdtDelegate	0x5f2a43EeB6D624E145F2d7eFEBD13CADe7083Ae6
JDaiDelegator	0xc988c170d0E38197DC634A45bF00169C7Aa7CA19
JDaiDelegate	0xF65A0817D7C5b78C97B4265576aFBd9535503d42
JLinkDelegator	0x585E7bC75089eD111b656faA7aeb1104F5b96c15
JLinkDelegate	0x6Caf4068ADC5766447205C9e51488586219d51C5
JMimDelegator	0xcE095A9657A02025081E0607c8D8b081c76A75ea
JMimDelegate	0x647Da94Ae8eC35E9627DF11BFFad19513892CF2B
JWethDelegator	0x929f5caB61DFEc79a5431a7734a68D714C4633fa
JWethDelegate	0xEb41c98513ff3f975016b26e16cbf26E2F1B1DF8
JWbtcDelegator	0x3fE38b7b610C0ACD10296fEf69d9b18eB7a9eB1F
JWbtcDelegate	0x3b34E169438FC65Ed1c018655d04e5b0f3185ecc

View Audit Report

	Found	Resolved	Partially Resolved	Acknowledged (no change made)
High	4	2	–	2
Medium	6	1	–	5
Low	3	1	1	1
Informational	30	19	1	10
Total	43	23	2	18

When using this protocol, the main risks you want to look out for are:

Ensuring that the contracts you are interacting with matches the one we audited. This can be done by comparing the addresses with the one present in the contracts page in our audit.
Our audits only cover code-related risks. Users will have to do their own due diligence on other aspects of the protocol such as the reputation of the team, the protocol’s tokenomics, and other aspects of the project that might be relevant.

Audit Report - Trader Joe Launchpeg

Commissioned

29 Apr 2022

Completed

24 May 2022

Contracts Audited

LaunchpegFactory	Proxy: 0x7BFd7192E76D950832c77BB412aaE841049D8D9B Implementation: 0x454206AD825cAfaE03c9581014AF6b74f7D53713
BaseLaunchPeg	Dependency of FlatLaunchPeg and Launchpeg
FlatLaunchPeg	Implementation (used by all FlatLaunchPeg deployments): 0xB7E39B647b1ddcA45d58b9fb1F265C7c25627e6F
Launchpeg	Implementation (used by all Launchpeg deployments): 0xB22c32B0bF1a6A7c50f0c528c3566E7dB12659D4
BatchReveal	FAILED MATCH
ERC721A	Dependency of BaseLaunchPeg
LaunchPegErrors	Dependency of all contracts

The BatchReveal component was modified to include Chainlink VRF logic after the audit. This logic was not audited and users should be extremely careful with NFTs that use it.

View Audit Report

	Found	Resolved	Partially Resolved	Acknowledged (no change made)
High	2	2	–	–
Medium	3	3	–	–
Low	5	2	1	2
Informational	15	14	–	1
Total	25	21	1	3

Audit Report - Trader Joe Reward Distributor
Commissioned

16 Apr 2022

Completed

11 Jun 2022

Contracts Audited

RewardDistributorV2 0x5d52300fa52845874f06430c3b0db386aab877f9

View Audit Report
Issues
Risk Summary

Found Resolved Partially Resolved Acknowledged
(no change made)

High 3 3 – –

Medium 0 – – –

Low 1 1 – –

Informational 5 4 – 1

Total 9 8 – 1

When using this protocol, the main risks you want to look out for are:

Ensuring that the contracts you are interacting with matches the one we audited. This can be done by comparing the addresses with the one present in the contracts page in our audit.

Our audits only cover code-related risks. Users will have to do their own due diligence on other aspects of the protocol such as the reputation of the team, the protocol’s tokenomics, and other aspects of the project that might be relevant.

Issues Classification

	Found	Resolved	Partially Resolved	Acknowledged (no change made)
High	3	3	–	–
Medium	0	–	–	–
Low	1	1	–	–
Informational	5	4	–	1
Total	9	8	–	1

Audit Report - Trader Joe (DEX v2.1)

Commissioned

12 Feb 2023

Completed

02 Apr 2023

Contracts Audited

LBFactory - Avalanche	0x8e42f2F4101563bF679975178e880FD87d3eFd4e
LBFactory - Arbitrum	0x8e42f2F4101563bF679975178e880FD87d3eFd4e
LBFactory - BSC	0x8e42f2F4101563bF679975178e880FD87d3eFd4e
LBPair	0xee5a90098b270596ec35d637b30d908c862c86df
LBToken	Dependency
Encoded	Dependency
LiquidityConfiguration	Dependency
PackedUint128Math	Dependency
SafeCast	Dependency
SampleMath	Dependency
TreeMath	Dependency
AddressHelper	Dependency
BinHelper	Dependency
Clone	Dependency
Constants	Dependency
FeeHelper	Dependency
ImmutableClone	Dependency
OracleHelper	Dependency
PairParameterHelper	Dependency
PendingOwnable	Dependency
PriceHelper	Dependency
ReentrancyGuard	Dependency
TokenHelper	Dependency

View Audit Report

	Found	Resolved	Partially Resolved	Acknowledged (no change made)
High	1	1	–	–
Medium	5	5	–	–
Low	18	17	–	7
Informational	4	4	–	1
Total	35	27	–	8

When using this protocol, the main risks you want to look out for are:
1. Ensuring that the contracts you are interacting with matches the one we audited. This can be done by comparing the addresses with the one present in the contracts page in our audit.
2. Our audits only cover code-related risks. Users will have to do their own due diligence on other aspects of the protocol such as the reputation of the team, the protocol’s tokenomics, and other aspects of the project that might be relevant.

Audit Report - Trader Joe (v2 Vaults)

Commissioned

05 Mar 2023

Completed

11 May 2023

Contracts Audited

VaultFactory	0x613aDdd55D30BF626c3009e9DAC66222346Ae760
BaseVault	Dependency
SimpleVault	0xc8240C9e7eA8f94aC12da06b1B17be3e0F415a6D
OracleVault	0xFA92D54bAD5Bb85f59e73B557Ea9BBD7b3B7F266
Strategy	0xAF705A05789BEdCB5d4983453da7D35f4585d92c
CloneExtension	Not used — using Clone contract from JoeV2
Distribution	Not used
Math	Library

View Audit Report

	Found	Resolved	Partially Resolved	Acknowledged (no change made)
High	1	1	–	–
Medium	0	–	–	–
Low	19	14	–	5
Informational	17	11	–	6
Total	37	26	–	11

Audit Report - Trader Joe (Auto Pools)

Commissioned

21 Jun 2023

Completed

25 Jul 2023

Contracts Audited

APTFarm 0x57FF9d1a7cf23fD1A9fd9DC07823F950a22a718C
SimpleRewarderPerSec 0xe7CE3fAC9CB2933aB96fE1dc6B9D58d2fb4303eF
RewarderFactory 0x501b8AFd35df20f531fF45F6f695793AC3316c85

View Audit Report

Issues
Risk Summary

TH Found Resolved Partially Resolved Acknowledged
(no change made)

Governance – – – –

High 2 1 – 1

Medium 2 1 – 1

Low 7 7 – –

Informational 5 3 – 2

Total 16 12 – 4

When using this protocol, the main risks you want to look out for are:
1. Ensuring that the contracts you are interacting with matches the one we audited. This can be done by comparing the addresses with the one present in the contracts page in our audit.
2. Our audits only cover code-related risks. Users will have to do their own due diligence on other aspects of the protocol such as the reputation of the team, the protocol’s tokenomics, and other aspects of the project that might be relevant.

Issues Classification

TH	Found	Resolved	Partially Resolved	Acknowledged (no change made)
Governance	–	–	–	–
High	2	1	–	1
Medium	2	1	–	1
Low	7	7	–	–
Informational	5	3	–	2
Total	16	12	–	4

For Trader Joe (Core v2.2)

Commissioned

Completed

31 Mar 2024

Contracts Audited

LBFactory	0xa6630671775c4EA2743840F9A5016dCf2A104054
LBPair	Implementation:
	0xf6863Db7323aaC43fE8AEF0B3eF63AA6b32DDB3B
LBRouter	0xAFb85a12Babfafabfe1a518594492d5a830e782a
BinHelper	Dependency
OracleHelper	Dependency
ReentrancyGuardUpgradeable	Dependency
Uint256x256Math	Dependency
Hooks	Dependency
LBBaseHooks	Undeployed
LBHooksManager	Undeployed
LBHooksBaseRewarder	Undeployed
LBHooksRewarder	Undeployed
LBHooksExtraRewarder	Undeployed
MasterChef	Undeployed

View Audit Report

TH	Found	Resolved	Partially Resolved	Acknowledged (no change made)
Governance	1	–	–	1
High	2	2	–	–
Medium	4	2	–	2
Low	7	4	–	3
Informational	12	5	–	7
Total	26	13	–	14

SimpleRewarderPerSec	SimpleRewarderPerSec.sol
MasterChefJoeV3	MasterChefJoeV3.sol

APTFarm	0x57FF9d1a7cf23fD1A9fd9DC07823F950a22a718C
SimpleRewarderPerSec	0xe7CE3fAC9CB2933aB96fE1dc6B9D58d2fb4303eF
RewarderFactory	0x501b8AFd35df20f531fF45F6f695793AC3316c85

Trader Joe

Project Information

Category

Network

Website

Audit Report - Trader Joe MasterChefV3

Commissioned

Completed

Contracts Audited

Audit Report - Trader Joe Lending

Commissioned

Completed

Contracts Audited

Audit Report - Trader Joe Launchpeg

Commissioned

Completed

Contracts Audited

Audit Report - Trader Joe Reward Distributor

Commissioned

Completed

Contracts Audited

Audit Report - Trader Joe (DEX v2.1)

Commissioned

Completed

Contracts Audited

Audit Report - Trader Joe (v2 Vaults)

Commissioned

Completed

Contracts Audited

Audit Report - Trader Joe (Auto Pools)

Commissioned

Completed

Contracts Audited

For Trader Joe (Core v2.2)

Commissioned

Completed

Contracts Audited

Browse more audits

Smart Contract Security Assessment

Darkside Finance

Smart Contract Security Assessment

PolyPup Punks

Smart Contract Security Assessment

AvaBot

Smart Contract Security Assessment

Camelot

Smart Contract Security Assessment

Algebra Protocol

Smart Contract Security Assessment

LayerZero

Be Part of the Movement –Contact Us Today

Smart Contract
Security Assessment

Smart Contract
Security Assessment

Smart Contract
Security Assessment

Smart Contract
Security Assessment

Smart Contract
Security Assessment

Smart Contract
Security Assessment

Be Part of the Movement –
Contact Us Today