CertiK reviewed MARBLEX (Marblex - Audit 2) on 11 Apr 2024: 2 findings, 0 critical; 1 marked fixed, 1 acknowledged.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 0 | 1 |
The linked comments do not correctly reflecting the access control management ```rust=158 /// Permission management is managed by sha3_256 (b"MINTER_ROLE") in access_control. /// - sender : A signer object for permission checking. /// - coin : The withdrawn coin object. public fun burn(sender: &signer, coin: coin::Coin<MBX>) acquires CoinRoleStore { whenNotPaused(); // modifier let amount = coin::value<MBX>(&coin); coin::burn<MBX>(coin, get_burn_cap(sender)); event::emit(BurnEvent { sender: address_of(sender), amount }); } /// Set the frozen state of 0x1::coin to true.\ /// Permission management is managed by sha3_256 (b"BURNER_ROLE") in access_control. /// - sender : A signer object for permission checking. /// - account : The address of the target account to be frozen. public entry fun set_freeze(sender: &signer, account: address) acquires CoinRoleStore { coin::freeze_coin_store(account, get_freeze_cap(sender)); event::emit(FreezeEvent { account }); } ``` - L158: MINTER_ROLE should be BURNER_ROLE - L169: MINTER_ROLE should be FREEZER_ROLE
The report names a repository or files. Open the report to see its scope.
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us