CertiK reviewed Vemate on 22 Sep 2022: 28 findings, 0 critical; 26 marked fixed, 2 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 2 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 0 | 26 |
In the contract `Ownable` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and change the address of `_owner` to another contract or user.  In the contract `Vemate` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and completely change features of this contract, such as adjusting fee amounts, draining the funds (in BNB and the contract token) from the contract and sending them to their preferred address, adjusting timelock settings, maliciously updating `maxTxAmount`, `tokenPerBNB`, or `setMinTokenToSwapAndLiquify` to undesirable values. The attacker would also be able to change the router address, adjust the `swapSlippageTolerancePercent` to be as high as 100%, and update the `_isPrivileged` status of any address they want. 
Upon deployment of the contract, the `_totalSupply` for the contract token is held solely by the `_owner` of the contract. This could be a centralization risk as the deployer can distribute tokens without obtaining the consensus of the community.
| Address | Chain | Source code |
|---|---|---|
| 0x1f18…24b90x1f1855a2cee5fd8af65446d2ac01ffe458d924b9 | Chain: BNB Chain | Source code: Verified source |
| 0xe615…8e510xe615c5e7219f9801c3b75bc76e45a4dab3c38e51 | Chain: BNB Chain | Source code: Verified source |
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us