Nordic AI

CertiK4 Sep 2023Code version: not recorded (see the report)

Audit

CertiK reviewed Nordic Ai on 4 Sep 2023: 7 findings, 0 critical; 5 marked fixed, 2 acknowledged.

No open critical findings

Open the report Open Nordic Ai’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

Severity	Acknowledged	Fixed
Critical	0	0
High	2	0
Medium	0	0
Low	0	5

HighCentralization Risks in NordicAI.solAcknowledged

In the contract `Ownable` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and transfer the ownership to a different EoAs he owns. ![](https://accelerator-tasks-prod.acc.corp.certik.com/11ee-3b18-8cdd47b0-90c2-a76e24c74bf3/diagrams/centralization_NordicAI-Ownable-_owner.svg)

HighInitial Token Distribution Centralization RiskAcknowledged

All of the `$NRDC` tokens are sent to the contract deployer or one or several externally-owned account (EOA) addresses. This is a centralization risk because the deployer or the owner(s) of the EOAs can distribute tokens without obtaining the consensus of the community. Any compromise to these addresses may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project.