BG Trade

Off-Chain (Private)
Audited on 2023/07/15
No active critical issues
Access report

Summary

BGT (Bit Global Trade), the Chinese name of Bit Global Trade, aims to aggregate multi-dimensional asset investment on the same plane, provide efficient connection opportunities for heterogeneous assets such as stocks, bonds, commodities, and cryptocurrencies, and provide users with A RWA (real world asset) asset allocation scheme. Holders of BGT will receive airdrops of other upcoming company tokens and other assets. The vision becomes the native asset of Web3.

Issues (4)

Low
Medium
High
Critical
Total
Not fixed
2-2-4
Fixed
----0
Total20204
Centralization Risks in BGT.sol
not_fixed/high
In the contract `BGT` the role `_bridgeadmin` has authority over the functions shown in the diagram below.
Any compromise to the `_bridgeadmin` account may allow the hacker to take advantage of this authority and mint and burn tokens.
![](https://accelerator-tasks-prod.acc.corp.certik.com/d3ab94810dd04495b4a2032f58c6910b/diagrams/centralization_BGT-BGT-_bridgeadmin.svg)

In the contract `BGT` the role `_owner` has authority over the functions shown in the diagram below.
Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and add bridge admin and Policeman to the contract.
![](https://accelerator-tasks-prod.acc.corp.certik.com/d3ab94810dd04495b4a2032f58c6910b/diagrams/centralization_BGT-BGT-_owner.svg)

In the contract `BGT` the role `_policemans` has authority over the functions shown in the diagram below.
Any compromise to the `_policemans` account may allow the hacker to take advantage of this authority and modify the Prohibit list.
![](https://accelerator-tasks-prod.acc.corp.certik.com/d3ab94810dd04495b4a2032f58c6910b/diagrams/centralization_BGT-BGT-_policemans.svg)
Initial Token Distribution
not_fixed/high
All of the BGT tokens are sent to the contract deployer or one or several externally-owned account (EOA) addresses. This is a centralization risk because the deployer or the owner(s) of the EOAs can distribute tokens without obtaining the consensus of the community. Any compromise to these addresses may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project.
Missing Emit Events
not_fixed/low
There should always be events emitted in the sensitive functions that are controlled by centralization roles.
Redundant Statement
not_fixed/low
One or more statements do not affect the functionality of the codebase and appear to be either leftovers from test code or older functionality.

```solidity=112
            amount;
```

Contract (1)

#File Name
1

BGT.sol