clinq.

CertiK27 Jan 2023Files named in the report

Audit

CertiK reviewed Clinq.Gold - (clinq.) on 27 Jan 2023: 12 findings, 0 critical; 7 marked fixed, 5 open.

No open critical findings

Open Clinq.Gold -’s security record

The original report was removed from its address (seen 15 Oct 2026).

Trustblock does not review code.

Findings12

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	5	0
Medium	0	1
Low	0	6

HighCentralization Risks in CGTMinting.solOpen

In the contract `CGTMinting` the role `DEFAULT_ADMIN_ROLE` has authority over the functions shown in the diagram below. Any compromise to the `DEFAULT_ADMIN_ROLE` account may allow the hacker to take advantage of this authority. ![](https://accelerator-tasks-prod.acc.corp.certik.com/e83bdb8ffc6549f0af9e00a4a5f26813/diagrams/centralization_CGTMinting-CGTMinting-DEFAULT_ADMIN_ROLE.svg) In the contract `CGTMinting` the role `MINT_ROLE` has authority over the functions shown in the diagram below. Any compromise to the `MINT_ROLE` account may allow the hacker to take advantage of this authority. ![](https://accelerator-tasks-prod.acc.corp.certik.com/e83bdb8ffc6549f0af9e00a4a5f26813/diagrams/centralization_CGTMinting-CGTMinting-MINT_ROLE.svg)

HighCentralization Risks in ClinqGoldToken.solOpen

In the contract `ClinqGoldToken` the role `DEFAULT_ADMIN_ROLE` has authority over the functions shown in the diagram below. Any compromise to the `DEFAULT_ADMIN_ROLE` account may allow the hacker to take advantage of this authority. ![](https://accelerator-tasks-prod.acc.corp.certik.com/e83bdb8ffc6549f0af9e00a4a5f26813/diagrams/centralization_ClinqGoldToken-ClinqGoldToken-DEFAULT_ADMIN_ROLE.svg) In the contract `ClinqGoldToken` the role `MINT_ROLE` has authority over the functions shown in the diagram below. Any compromise to the `MINT_ROLE` account may allow the hacker to take advantage of this authority. ![](https://accelerator-tasks-prod.acc.corp.certik.com/e83bdb8ffc6549f0af9e00a4a5f26813/diagrams/centralization_ClinqGoldToken-ClinqGoldToken-MINT_ROLE.svg)

HighCentralization Risks in CNQStaking.solOpen

In the contract `CNQStaking` the role `DEFAULT_ADMIN_ROLE` has authority over the functions shown in the diagram below. Any compromise to the `DEFAULT_ADMIN_ROLE` account may allow the hacker to take advantage of this authority. ![](https://accelerator-tasks-prod.acc.corp.certik.com/e83bdb8ffc6549f0af9e00a4a5f26813/diagrams/centralization_CNQStaking-CNQStaking-DEFAULT_ADMIN_ROLE.svg)

HighCentralized Control of Contract UpgradeOpen

The linked contracts are upgradeable contracts, the owner can upgrade the contract without the community's commitment. If an attacker compromises the account, he can change the implementation of the contract and drain tokens from the contract.

HighInitial Token DistributionOpen

All CNQ tokens are sent to the contract deployer when deploying the contract. This is a potential centralization risk as the deployer can distribute tokens without the consensus of the community.