Galvan DAO

CertiK1 address on Ethereum

CertiK reviewed Galvan (Galvan DAO) on 14 Aug 2023: 2 findings, 0 critical; none marked fixed.

No open critical findings
Open the reportOpen Galvan’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings2

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High100
Medium000
Low100
HighCentralization Related Risk - Mint FunctionOpen

In the project design, the owner is able to set the issuer of the protocol, which can call `mint()` to mint an arbitrary amount of tokens without any restriction. Any compromise to the owner or the issuer account may allow a hacker to take advantage of this authority, mint tokens, and sell tokens for profit, thus causing unexpected losses to the users/project. Additionally, related functions are listed below: - `mint()`: Issuer can mint an arbitrary amount of tokens to any address; - `setIssuer()`: Owner can set the issuer role; - `transferOwnership()`: Owner can set a new pending owner candidate; - `confirmOwnership()`: New pending owner candidate can confirm and become the new owner.

LowVariables That Could Be Declared as ImmutableOpen

The linked variables assigned in the constructor can be declared as `immutable`. Immutable state variables can be assigned during contract creation but will remain constant throughout the lifetime of a deployed contract. A big advantage of immutable variables is that reading them is significantly cheaper than reading from regular state variables since they will not be stored in storage.

Contracts in scope1

AddressChainSource code
0xf7e945fce8f19302aacc7e1418b0a0bdef89327bChain: EthereumSource code: Verified source

Part of Galvan’s security record

Galvan
Audits1 audit by 1 firmLast audit Aug 2023, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open Galvan’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us