CRTR

CertiK7 Aug 2023Files named in the report

Audit

CertiK reviewed Fandom (CRTR) on 7 Aug 2023: 4 findings, 0 critical; 2 marked fixed, 2 acknowledged.

No open critical findings

Open the report Open Fandom’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings4

Statuses are the security firm’s own, from its report.

Severity	Acknowledged	Fixed
Critical	0	0
High	2	0
Medium	0	0
Low	0	2

HighCentralization Related RisksAcknowledged

In the contract `CrtrToken` the role `DEFAULT_ADMIN_ROLE` has authority over the functions shown below. - `setVestingSchedule(uint _year, uint _month, uint _day)`: Set the vesting schedule for token distribution, only callable by addresses with the `DEFAULT_ADMIN_ROLE`. Any compromise to the `DEFAULT_ADMIN_ROLE` account may allow the hacker to take advantage of this authority. In the contract `CrtrToken`, `setVestingSchedule()` can only be called once by the privileged role.

HighInitial Token DistributionAcknowledged

All `CRTR` tokens are sent to the contract deployer when deploying the contract. This is a potential centralization risk as the deployer can distribute `CRTR` tokens without the consensus of the community.