CertiK reviewed Icplaza on 13 Sep 2022: 6 findings, 0 critical; 5 marked fixed, 1 acknowledged.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 1 | 4 |
The `validator-dao` module outlines the following scenario: Grantees get the power to do something (e.g. issue ERC20 tokens) by escrowing their cosmos coins to the module address, after issuing ERC20 tokens, the escrowed coins will be absorbed and these cosmos coins will be transferred to the validator address. Obviously, the logic here is incomplete, the grantee cannot withdraw their escrow coins and the process of issuing ERC20 is not in this module. The currently audited code represents a tiny part of the entire protocol. We may most likely not be informed of its true purpose and just have to do our best to ensure that the module's functionality is within manageable limits.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (20)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us