Project ROA - audit

CertiK1 May 2023Code version: not recorded (see the report)

Audit

CertiK reviewed ROALAND FOUNDATION (Project ROA - audit) on 1 May 2023: 3 findings, 0 critical; 2 marked fixed, 1 open.

No open critical findings

Open the report Open ROALAND FOUNDATION’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings3

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	1	0
Medium	0	0
Low	0	2

LowMissing Error Handling on Unexpected URL SelectioFixed

The project's codebase permits users to utilize RPC URLs for Solana Devnet and Mainnet. However, there is a concern that if the input value corresponds to another network, such as the Testnet, the Devnet RPC will be utilized by default, which may cause unexpected issues.

LowMissing Updating `recent_blockhash`Fixed

To prevent duplication and to establish a transaction's lifetime, a recent block hash is included in the transaction and if the recent block hash is too old the transaction will be rejected. In the codebase, the `recent_blockhash` is acquired only once at the start of the program, and all three transactions - create mint, create associated token account, and mint token - use the same `recent_blockhash`. This approach could lead to potential failures due to the transaction's execution time. Reference: [Recent Blockhash](https://docs.solana.com/developing/programming-model/transactions#recent-blockhash)