Trust-Ai

CertiK6 Dec 20231 address on BNB Chain

CertiK reviewed Trust AI (Trust-Ai) on 6 Dec 2023: 19 findings, 0 critical; 4 marked fixed, 2 acknowledged, 13 open.

No open critical findings

Open the report Open Trust AI’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings19

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	1	2
Medium	0	1	1
Low	13	0	1

HighInitial Token DistributionAcknowledged

All of the `TRT` tokens, which is in amount of `20000000 * (10**_decimals);`, are sent to the contract deployer or one or several externally-owned account (EOA) addresses. This is a centralization risk because the deployer or the owner(s) of the EOAs can distribute tokens without obtaining the consensus of the community. Any compromise to these addresses may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project.

MediumPair Is Not Excluded From FeesAcknowledged

The contract `TRUSTAI` has a whitelist, `_isExcludedFromFees`, for excluding some addresses from the fee mechanism, e.g: ```solidity=978 excludeFromFees(_owner, true); excludeFromFees(address(this), true); excludeFromFees(address(0xdead), true); ``` However, the address of the **Liquidity Pool Pair**, which is `uniswapV2Pair`, is not excluded from the fees. Therefore, it might lead to an **unbalanced** liquidity pool exploit.