Let's Goal - Audit

CertiK17 Oct 2022Files named in the report

Audit

CertiK reviewed LetsGoal (Let's Goal - Audit) on 17 Oct 2022: 6 findings, 0 critical; 4 marked fixed, 2 open.

No open critical findings

Open the report Open LetsGoal’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings6

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	2	0
Medium	0	0
Low	0	4

HighCentralization Risks in FootBall.solOpen

In the contract `FootBall` the role `DEFAULT_ADMIN_ROLE` has authority over the functions shown in the diagram below. Any compromise to the `DEFAULT_ADMIN_ROLE` account may allow the hacker to take advantage of this authority and arbitrarily assign privileged roles and withdraw contract balances. ![](https://accelerator-tasks-prod.acc.corp.certik.com/ea2ceaac34ef422e89d7f20e8a262e0e/diagrams/centralization_FootBall-FootBall-DEFAULT_ADMIN_ROLE.svg) In the contract `FootBall` the role `MINTER_ROLE` has authority over the functions shown in the diagram below. Any compromise to the `MINTER_ROLE` account may allow the hacker to take advantage of this authority and take over token minting and token transfer. ![](https://accelerator-tasks-prod.acc.corp.certik.com/ea2ceaac34ef422e89d7f20e8a262e0e/diagrams/centralization_FootBall-FootBall-MINTER_ROLE.svg)

HighInitial Token DistributionOpen

All of the LETSGOAL tokens are sent to the contract deployer when deploying the contract. This could be a centralization risk as the deployer can distribute LETSGOAL tokens without obtaining the consensus of the community.