CertiK reviewed Safe Road Club (Safe Road Club (SRC)) on 26 Aug 2024: 2 findings, 0 critical; all acknowledged, none fixed.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 2 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 0 | 0 |
According to the on-chain data, the following authority are involved with Safe Road Club Token: Based on the on-chain analysis: - Freeze authority has been assigned to the [8dxpnWrrM3D9fFX4kE8vTGc2UR8fyrqX5CCh7CgKqTw](https://explorer.solana.com/address/8dxpnWrrM3D9fFX4kE8vTGc2UR8fyrqX5CCh7CgKqTw). - The metadata update authority for the Safe Road Club Token is centralized to a single account [8dxpnWrrM3D9fFX4kE8vTGc2UR8fyrqX5CCh7CgKqTw](https://explorer.solana.com/address/8dxpnWrrM3D9fFX4kE8vTGc2UR8fyrqX5CCh7CgKqTw). - The Mint authority has been assigned to [8dxpnWrrM3D9fFX4kE8vTGc2UR8fyrqX5CCh7CgKqTw](https://explorer.solana.com/address/8dxpnWrrM3D9fFX4kE8vTGc2UR8fyrqX5CCh7CgKqTw). Any compromise of the aforementioned account, backed by a single private key, could allow an attacker to freeze any number of tokens during circulation, thereby disrupting normal market trading or minting any amount of tokens to any address the attacker owns. Additionally, if the metadata update authority is compromised, attackers could maliciously manipulate the contract metadata, which could mislead users and platforms, disrupting ecosystem operations based on incorrect token information.
All of the Safe Road Club (SRC) tokens are initially sent to the specified address. This could be a centralization risk as the anonymous address can distribute tokens without obtaining the consensus of the community. Any compromise to this account that holds undistributed tokens may allow the attacker to steal and sell tokens on the market, resulting in severe damage to the project. Based on the on-chain analysis, the initially minted 1,000,000,000 (8 decimals) SRC token has been transferred to the token account [Hw2Ju7wzqkgLEkpJD2B6ZUZkALEty9xYpWKCKUXehtRt](https://explorer.solana.com/address/Hw2Ju7wzqkgLEkpJD2B6ZUZkALEty9xYpWKCKUXehtRt)(owner: [8dxpnWrrM3D9fFX4kE8vTGc2UR8fyrqX5CCh7CgKqTw](https://explorer.solana.com/address/8dxpnWrrM3D9fFX4kE8vTGc2UR8fyrqX5CCh7CgKqTw) in the following transaction [26z2F6JLg43xk9qJGJWvkFA4jZcCzwgEgT8wEGYu9x97XdjLa2SL5ozH91JEdLkYFt4Buh9miY4a8hiQRBcMKHs1](https://explorer.solana.com/tx/26z2F6JLg43xk9qJGJWvkFA4jZcCzwgEgT8wEGYu9x97XdjLa2SL5ozH91JEdLkYFt4Buh9miY4a8hiQRBcMKHs1) As of today (08/21/2024), the tokens have been distributed to multiple addresses, and the detailed holder list can be found on the [solscan page of the token](https://solscan.io/token/5gkd3yk3WmTEjYxiTsCXk3p8uPd9W85L5UNYNUQaheyb#holders), according to this data, it is found that the proportion of tokens held by a single account is as high as 60%, with the top 10 holders holding more than 99% of the total supply.
The report names a repository or files. Open the report to see its scope.
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us