CertiK reviewed Brale on 11 May 2022: 2 findings, 0 critical; 1 marked fixed, 1 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 0 | 1 |
In the contract `StableCoin`, the role `MINTER_ROLE` has authority over function `mint()` to mint any amount of token to any allowed account. Any compromise to the `MINTER_ROLE` account may allow a hacker to take advantage of this authority and take control over token minting. The role `MODERATOR_ROLE` has authority over functions `allow()` and `deny()` to grant/revoke access to this token for any account. Any compromise to the `MODERATOR_ROLE` account may allow a hacker to take advantage of this authority and arbitrarily allow/block any account. The role `PAUSER_ROLE` has authority over functions `pause()` and `unpause()` to stop/resume token transfer, minting and burning. Any compromise to the `PAUSER_ROLE` account may allow a hacker to take advantage of this authority and disrupt normal token transactions. The role `UPGRADER_ROLE` has authority over functions `upgradeTo()` and `upgradeToAndCall()` to change the underlying contract address. This is provided in contract UUPSUpgradeable. Any compromise to the `UPGRADER_ROLE` account may allow a hacker to take advantage of this authority and delete this contract. The role `DEFAULT_ADMIN_ROLE` has authority to grant and revoke any role, as provided in contract `AccessControlUpgradeable`. Any compromise to the `DEFAULT_ADMIN_ROLE` account may allow a hacker to take advantage of this authority and take over role assignment.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
1,045 projects reviewed · 1,376 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us