VSG

CertiK17 Sep 2024Files named in the report

Audit

CertiK reviewed Vector Smart Gas (VSG) on 17 Sep 2024: 13 findings, 0 critical; 1 marked fixed, 3 acknowledged, 9 open.

No open critical findings

Open the report Open Vector Smart Gas’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings13

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	1	1
Medium	0	2	0
Low	9	0	0

HighInitial Token DistributionAcknowledged

All of the `VSG` tokens are sent to the `realOwner` address. This is a centralization risk because the deployer / `realOwner` address can distribute tokens without obtaining the consensus of the community. Any compromise to these addresses may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project.

MediumAssigning instead of ComparingAcknowledged

The code mistakenly uses an assignment operator instead of a comparison operator. This error alters the logic and can lead to unintended behavior.

MediumLack of Reset Allowance After Address/Router ModiAcknowledged

The `set` function was intended to update the contract's router/address. However, it has been observed that when a new router/address is set, the allowance for the old router/address is not updated accordingly. This oversight allows the old router/address to potentially exploit the contract by continuously calling the `transferFrom()` function, which could result in unauthorized token transfers and depletion of the token balance.