Hanchain

CertiK24 Apr 2024Files named in the report

Audit

CertiK reviewed KHANs (Hanchain) on 24 Apr 2024: 6 findings, 0 critical; 4 marked fixed, 2 open.

No open critical findings

Open the report Open KHANs’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings6

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	2	1
Medium	0	0
Low	0	3

HighCentralization Risks in HanChain.solFixed

In the contract `HanChain` the role `PAUSER_ROLE` has authority over the functions shown in the diagram below. Any compromise to the `PAUSER_ROLE` account may allow the hacker to take advantage of this authority. ![](https://accelerator-tasks-prod.acc.corp.certik.com/2f4a944fdf734a5f8e470bbed917a4d3/diagrams/centralization_HanChain-HanChain-PAUSER_ROLE.svg) In the contract `HanChain` the role `SNAPSHOT_ROLE` has authority over the functions shown in the diagram below. Any compromise to the `SNAPSHOT_ROLE` account may allow the hacker to take advantage of this authority. ![](https://accelerator-tasks-prod.acc.corp.certik.com/2f4a944fdf734a5f8e470bbed917a4d3/diagrams/centralization_HanChain-HanChain-SNAPSHOT_ROLE.svg)

LowMissing Emit EventsFixed

There should always be events emitted in the sensitive functions that are controlled by centralization roles.

LowPotential Duplicate BeneficiariesFixed

Because there is no prohibition on adding beneficiaries repeatedly after release, this function `getAllBeneficiary()` may return the duplicate values.

LowToo Many DigitsFixed

Literals with many digits are difficult to read and review. ```solidity=20 _mint(msg.sender, 1500000000 * 10 ** decimals()); ```