# Polemos audit fixes

## 3.1 (HAL-01) USERS ARE UNABLE TO CLAIM THEIR REWARDS - MEDIUM

Fixed
Workaround is adding a maximum numer of vaults limit.

## 3.2 (HAL-02) TOKEMAK POOL DEPOSIT DOES NOT WORK FOR TRANSFER-ON-FEE OR DEFLATIONARY TOKENS - MEDIUM

Not fixed
Unit tests added to makesure tokens are not `TRANSFER-ON-FEE OR DEFLATIONARY TOKENS`.

The $PLMS token is a standard ERC-20 token and not `TRANSFER-ON-FEE OR DEFLATIONARY TOKENS`. Hence, we believe this is not a issue for this project.

## 3.3 (HAL-03) OWNERSHIP CAN BE LOST - LOW

Fixed
[Ownable2Step](https://raw.githubusercontent.com/OpenZeppelin/openzeppelin-contracts/master/contracts/access/Ownable2Step.sol) is introduced to fix the issue.

`Ownable2Step` is pretty new(introduced in Sep/2022). At the time of writing, it is not included in the npm package(@openzeppelin/contracts@4.7.3). So we simply added its source code into the repository.

## 3.4 (HAL-04) CONTRACT IS APPROVING MAX TOKENS

Fixed

## 3.5 (HAL-05) USE ++I INSTEAD OF I++

Fixed

## 3.6 (HAL-06) ZERO ADDRESS NOT CHECKED

Fixed

## 3.7 (HAL-07) FILE NAME AND CONTRACT NAME IS NOT THE SAME

Fixed

## Brief summary

Issues reported in the audit report fixed except for `3.2 (HAL-02) TOKEMAK POOL DEPOSIT DOES NOT WORK FOR TRANSFER-ON-FEE OR DEFLATIONARY TOKENS - MEDIUM`.

Issues in `TokemakPool.sol` should be fixed by the `Tokemak` team.