FoundersDAO - Audit

CertiKFiles named in the report

CertiK reviewed Founders DAO (FoundersDAO - Audit) on 25 Jul 2023: 11 findings, 0 critical; 9 marked fixed, 2 open.

No open critical findings
Open the reportOpen Founders DAO’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings11

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High201
Medium001
Low007
HighCentralization Related RisksOpen

In the contract `FNDRCommunityPoolAmbassadors` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and distribute tokens. ![](https://accelerator-tasks-prod.acc.corp.certik.com/74651bbfb86347578a0b06f918e12621/diagrams/centralization_CommunityPoolAmbassadors-FNDRCommunityPoolAmbassadors-_owner.svg) ----- In the contract `FNDRCommunityPoolContributors` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and distribute tokens. ![](https://accelerator-tasks-prod.acc.corp.certik.com/74651bbfb86347578a0b06f918e12621/diagrams/centralization_CommunityPoolContributors-FNDRCommunityPoolContributors-_owner.svg) ----- In the contract `CommunityPoolReferrals` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority , can distribute tokens, and change the subscription price. ![](https://accelerator-tasks-prod.acc.corp.certik.com/74651bbfb86347578a0b06f918e12621/diagrams/centralization_CommunityPoolReferrals-CommunityPoolReferrals-_owner.svg) ----- In the contract `DAOReserve` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and distribute tokens. ![](https://accelerator-tasks-prod.acc.corp.certik.com/74651bbfb86347578a0b06f918e12621/diagrams/centralization_DAOReserve-DAOReserve-_owner.svg)

HighInitial Token DistributionOpen

All of the `FNDR` tokens are sent to several contracts and externally-owned account (EOA) addresses. This is a centralization risk because the owners of the EOAs can distribute tokens without obtaining the consensus of the community. Any compromise to these addresses may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project. ```solidity=52 _mint(dao_reserve_addr, ((totalMinted * 20) / 100)); _mint(dynamic_ico_addr, ((totalMinted * 50) / 100)); _mint(community_pool_ambassadors_addr, ((totalMinted * 5) / 100)); _mint(community_pool_contributors_addr, ((totalMinted * 5) / 100)); _mint(team_addr, ((totalMinted * 20) / 100)); ```

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (7)

  • smart-contracts/contracts/CommunityPoolContributors.sol
  • smart-contracts/contracts/DynamicICO.sol
  • smart-contracts/contracts/FloatingMaths.sol
  • smart-contracts/contracts/CommunityPoolReferrals.sol
  • smart-contracts/contracts/DAOReserve.sol
  • smart-contracts/contracts/FNDRToken.sol
  • smart-contracts/contracts/CommunityPoolAmbassadors.sol

Part of Founders DAO’s security record

Founders DAO
Audits1 audit by 1 firmLast audit Jul 2023, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open Founders DAO’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us