CertiK reviewed BG Trade on 15 Jul 2023: 4 findings, 0 critical; all acknowledged, none fixed.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 2 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 2 | 0 |
In the contract `BGT` the role `_bridgeadmin` has authority over the functions shown in the diagram below. Any compromise to the `_bridgeadmin` account may allow the hacker to take advantage of this authority and mint and burn tokens.  In the contract `BGT` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and add bridge admin and Policeman to the contract.  In the contract `BGT` the role `_policemans` has authority over the functions shown in the diagram below. Any compromise to the `_policemans` account may allow the hacker to take advantage of this authority and modify the Prohibit list. 
All of the BGT tokens are sent to the contract deployer or one or several externally-owned account (EOA) addresses. This is a centralization risk because the deployer or the owner(s) of the EOAs can distribute tokens without obtaining the consensus of the community. Any compromise to these addresses may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project.
There should always be events emitted in the sensitive functions that are controlled by centralization roles.
One or more statements do not affect the functionality of the codebase and appear to be either leftovers from test code or older functionality. ```solidity=112 amount; ```
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us