GhostMarket Token

CertiK19 Jan 2024Files named in the report

Audit

CertiK reviewed GhostMarket (GhostMarket Token) on 19 Jan 2024: 4 findings, 0 critical; 1 marked fixed, 3 open.

No open critical findings

Open the report Open GhostMarket’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings4

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	3	0
Medium	0	0
Low	0	1

HighCentralization RiskOpen

In the contract `GhostMarket`, the role `Owner` has the authority over the following function: - pause - unpause Any compromise to the `Owner` account may allow the hacker to take advantage of this and pause/unpause the contract.

HighCentralized Control of Contract UpgradeOpen

The GhostMarketToken contract inherits upgradeable contracts, indicating that it is part of an upgradeable system. Upgradeable contracts often pair with a proxy contract that is responsible for managing contract upgrades. The admin of the proxy often have the authority to update the implementation contract, i.e., the GhostMarketToken contract. Any compromise of the admin of the proxy could allow a hacker to exploit this authority, potentially altering the implementation contract pointed to by the proxy and thus executing malicious functionality within the implementation contract.

HighInitial token distributionOpen

All of the GhostMarket tokens are sent to the contract deployer when deploying the contract. This could be a centralization risk as the deployer can distribute GhostMarket tokens without obtaining the consensus of the community.