CertiK reviewed UPX People DAO on 31 Dec 2022: 3 findings, 0 critical; 1 acknowledged, 2 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 2 | 0 | 0 |
State variables that never change should be declared as `constant` to save gas. ```solidity=1555 string private _tokenName = "UPX People DAO"; ``` - `_tokenName` should be declared `constant`. --- ```solidity=1556 string private _tokenSymbol = "UPX"; ``` - `_tokenSymbol` should be declared `constant`. --- ```solidity=1557 uint8 private _decimals = 18; ``` - `_decimals` should be declared `constant`.
The `SafeMath` library is used unnecessarily. With Solidity compiler versions 0.8.0 or newer, arithmetic operations will automatically revert in case of integer overflow or underflow. ```solidity=565 library SafeMath { ``` - An implementation of `SafeMath` library is found. --- ```solidity=1553 using SafeMath for uint256; ``` - `SafeMath` library is used for `uint256` type in `UPX` contract. ```solidity=1582 uint256 newSupply = currentSupply.add(_amount); ``` - `SafeMath.add` is called in `mint` function of `UPX` contract.
The report names a repository or files. Open the report to see its scope.
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us