Token Mint

Quantstamp12 Dec 2019Files named in the report

Audit

Quantstamp reviewed Token Mint on 12 Dec 2019: 7 findings, 0 critical; 2 marked fixed, 1 acknowledged, 4 open.

No open critical findings

Open the report Open Token Mint’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	0
Low	4	1	2

LowCentralization of PowerOpen

Smart contracts will often have `owner` variables to designate the person with special privileges to make modifications to the smart contract.

LowClone-and-OwnOpen

The clone-and-own approach involves copying and adjusting open source code at one's own discretion. From the development perspective, it is initially beneficial as it reduces the amount of effort. However, from the security perspective, it involves some risks as the code may not follow the best practices, may contain a security vulnerability, or may include intentionally or unintentionally modified upstream libraries.

LowRace Conditions / Front-RunningOpen

A block is an ordered collection of transactions from all around the network. It's possible for the ordering of these transactions to manipulate the end result of a block. A miner attacker can take advantage of this by generating and moving transactions in a way that benefits themselves. Minters may be able to exploit a careless Master Minter. <br /><br /> **Update:** This has been deemed intended behaviour.

LowReliance on Other ContractsOpen

There is an external reliance on Gas Station Network (GSN), and that the version of the GSN contracts deployed on the Ethereum main-net is secure and trustworthy.