Lif3 L3USD

CertiK27 Feb 2024Code version: not recorded (see the report)

Audit

CertiK reviewed LIF3 (Lif3 L3USD) on 27 Feb 2024: 5 findings, 1 critical; 1 acknowledged, 4 open.

1 critical acknowledged, not fixed

Open the report Open LIF3’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings5

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged
Critical	0	1
High	0	0
Medium	0	0
Low	4	0

CriticalCentralization Related RisksAcknowledged

In the contract `L3USD`, the role `minter` has authority over function `issue()`. Any compromise to any of the `minter` accounts may allow a hacker to take advantage of this authority and mint any amount of token to their wallet. In the contract `L3USD`, the role `owner` has authority over the following functions via these (abstract) contracts: - `transferOwnership()` - `pause()` - `unpause()` - `addBlackList()` - `removeBlackList()` - `destroyBlackFunds()` - `deprecate()` - `redeem()` - `addMinter()` - `removeMinter()` - `setParams()` Any compromise to the `owner` account may allow a hacker to take advantage of this authority and deprecate this contract, arbitrarily set minters, set fee rate and max fee, collect fees, disrupt normal token activities, and even remove all the token balance in any token holder.