Illuvium Land Sale Protocol

CertiK18 May 2022Files named in the report

CertiK reviewed Illuvium (Illuvium Land Sale Protocol) on 18 May 2022: 7 findings, 0 critical; 6 marked fixed, 1 acknowledged.

No open critical findings

Open the report Open Illuvium’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

Severity	Acknowledged	Fixed
Critical	0	0
High	1	0
Medium	0	0
Low	0	6

HighCentralization Related RisksAcknowledged

In the contract `LandSale.sol`, the following roles has authority over the following functions: - `ROLE_DATA_MANAGER` role has authority over function `setInputDataRoot()` - `ROLE_SALE_MANAGER` role has authority over function `initialize()` - `ROLE_PAUSE_MANAGER` role has authority over function `pause()` - `ROLE_PAUSE_MANAGER` role has authority over function `resume()` - `ROLE_WITHDRAWAL_MANAGER` role has authority over function `setBeneficiary()` - `ROLE_WITHDRAWAL_MANAGER` role has authority over function `withdrawTo()` - `ROLE_RESCUE_MANAGER` role has authority over function `rescueErc20()` - Any compromise to the privileged roles may allow a hacker to take advantage of this authority and update the sensitive settings and execute sensitive functions of the project.