CertiK reviewed Founders DAO (FoundersDAO - Audit) on 25 Jul 2023: 11 findings, 0 critical; 9 marked fixed, 2 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 2 | 0 | 1 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 0 | 7 |
In the contract `FNDRCommunityPoolAmbassadors` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and distribute tokens.  ----- In the contract `FNDRCommunityPoolContributors` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and distribute tokens.  ----- In the contract `CommunityPoolReferrals` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority , can distribute tokens, and change the subscription price.  ----- In the contract `DAOReserve` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and distribute tokens. 
All of the `FNDR` tokens are sent to several contracts and externally-owned account (EOA) addresses. This is a centralization risk because the owners of the EOAs can distribute tokens without obtaining the consensus of the community. Any compromise to these addresses may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project. ```solidity=52 _mint(dao_reserve_addr, ((totalMinted * 20) / 100)); _mint(dynamic_ico_addr, ((totalMinted * 50) / 100)); _mint(community_pool_ambassadors_addr, ((totalMinted * 5) / 100)); _mint(community_pool_contributors_addr, ((totalMinted * 5) / 100)); _mint(team_addr, ((totalMinted * 20) / 100)); ```
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (7)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us