WSDM Token - Audit 1

CertiK13 May 2024Files named in the report

Audit

CertiK reviewed Wisdomise (WSDM Token - Audit 1) on 13 May 2024: 2 findings, 0 critical; none marked fixed.

No open critical findings

Open the report Open Wisdomise’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings2

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	1	0	0
Medium	0	0	0
Low	1	0	0

HighInitial Token DistributionOpen

All of the WSDM tokens are sent to one externally-owned account (EOA) address. This is a centralization risk because the owner of the EOA can distribute tokens without obtaining the consensus of the community. Any compromise to these addresses may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project.

LowThe `TOTAL_SUPPLY` is initiated without decimalsOpen

The constant `TOTAL_SUPPLY` is initialized as `1_000_000_000` without the token's decimals. This could lead to confusion as the actual total supply of the WSDM token is intended to be `TOTAL_SUPPLY * 10 ** decimals()`. Users inspecting the contract on-chain might be misled about the actual total supply of the tokens.