Kiros Coin

QuillAudits3 Jul 2023Files named in the report

Audit · firm’s term: audit report

QuillAudits reviewed Kiros Coin on 3 Jul 2023: 3 findings, 0 critical; all marked fixed.

No open critical findings

Open the report Open Kiros Coin’s security record

Report hosted on quillaudits.com.

Trustblock does not review code.

Findings3

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	1
Medium	0	0	2
Low	0	0	0

HighToken is not erc-20 compatibleFixed

Kiros token does not follow erc-20 token standard. ERC20 has defined an interface for being compatible but the kiros token is missing some of the implementation. Even though the token may work without standard definition it can cause issues if it is to work with other protocols.

MediumCentralization IssueFixed

In kiros contract functions mint() and changeBurnRate() are called by black_wallet which is handled by the team and is the main wallet. If, for some reason, the wallet key gets compromised, then the malicious actor can mint any number of tokens also by changing the burn rate can get a much higher amount of tokens sent back to black_wallet and can do harm to the protocol. Even though the likelihood of this happening is low, it is better to take measures.

MediumFee amount is not sent to black walletFixed

In kiros whitepaper, there is mention of: `Anytime there is a transaction, there is a small amount of KIROS burned. This acts as an anti-inflationary tool for the system. The burn, however, is not a traditional burn. The burn goes into a “black wallet” which is not dead` but while transferring the small amount which is smartly burned is not getting sent back to the black wallet as mentioned, making a loss for the protocol.