CertiK reviewed Amis on 31 May 2022: 8 findings, 0 critical; 1 marked fixed, 7 acknowledged.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 6 | 0 |
In the contract ERC721BlindBoxOnePhaseV1.sol the role `admin` has authority over the following functions: - setBaseURI(): change the base URI of the ERC721 token. - setContractURI(): change the `_contractURI`. - setMetadataHash(): change the `_metadataHash`. - safeMint(): mint `amont` tokens to the `to` address. - saftMintWithIds(): batchly mint tokens to the `to` addresses. Any compromise to the `admin` account may allow a hacker to take advantage of this authority and mint tokens.
There should always be events emitted in the sensitive functions that are controlled by centralization roles.
The contract inherited from `ERC721BatchMintBlindBoxRedeemV2` protocols which is out of scope.
The contract inherited from `ERC721BatchMintV2` protocols which is out of scope.
The contract inherited from `ERC721BlindBoxEnhancedV1` protocols which is out of scope.
The contract inherited from `ERC721SingleMintV2` protocols which is out of scope.
The function is deprecated according to the line 17.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (12)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us