CertiK reviewed AIDAv2 on 9 Jan 2025: 39 findings, 1 critical; 36 marked fixed, 3 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 4 |
| Medium | 0 | 0 | 9 |
| Low | 3 | 0 | 22 |
The cited address input is missing a check that it is not `address(0)`.
The `bindInviter()` function allows any user to register as a valid member and assign an address as an `inviter`. However, this function lacks restrictions and safeguards: - Anyone can call the function, enabling any address to register as a valid member without checks or prerequisites. - It allows any address to be set as an `inviter`, including invalid addresses such as the zero address, the contract's own address, or the caller's own address, which could undermine the intended purpose of tracking valid invite relationships. - Although the `member.inviter` field is set when this function is called, it is not utilized elsewhere in the contract, making its purpose unclear and potentially redundant.
The `deposit()` function allows any user to deposit `AID` or `USDT` tokens into the contract. However, the function does not update any state variables or store information related to the deposit. This behavior is unusual because functions named `deposit()` typically involve increasing a balance, tracking deposits, or granting some form of credit or acknowledgment to the depositor. The absence of such updates raises questions about the intended purpose of this function, as it seems to lack meaningful functionality and fails to provide expected behaviors associated with deposits.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us