CertiK reviewed Vector Smart Gas (VSG) on 17 Sep 2024: 13 findings, 0 critical; 1 marked fixed, 3 acknowledged, 9 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 1 |
| Medium | 0 | 2 | 0 |
| Low | 9 | 0 | 0 |
In the contract `vectorsmartgas`, the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and set the team wallet address, manually swap and burn tokens, set the tax split values, withdraw native token balance, set the marketing wallet, exclude account from fees, update the swap router address, set automated market maker pair, set the swap amount, withdraw tokens, set the sell tax, and set the buy tax.  Additionally, the addresses `marketingWallet` and `teamWallet` collectively receive at least half of token transfer fees denominated in the native token, given that `_devSplit + _marketingSplit + _lpSplit == 100` and `tokensToAddLiquidityWith = contractTokenBalance * lpSplit / 200`, which means that the LP share is at most half (=100/200) of swap fee.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us