RatWifHat - Contract Verification

CertiK1 address on Solana

CertiK reviewed RatWif (RatWifHat - Contract Verification) on 9 May 2024: 2 findings, 0 critical; all acknowledged, none fixed.

No open critical findings
Open the reportOpen RatWif’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings2

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High010
Medium010
Low000
HighInitial Token DistributionAcknowledged

All of the RatWifHat tokens are sent to the contract deployer when deploying the contract. This could be a centralization risk as the anonymous deployer can distribute tokens without obtaining the consensus of the community. Any compromise to the deployer account that holds undistributed tokens may allow the attacker to steal and sell tokens on the market, resulting in severe damage to the project. Based on the on-chain analysis, the initially minted 1000000000000000 RatWifHat token has been transferred to the token account [FH5Lcp5X6D1ZB1v1HjK2tLNKzzqJLSUCu4PA7iPvk4xp](https://solscan.io/account/FH5Lcp5X6D1ZB1v1HjK2tLNKzzqJLSUCu4PA7iPvk4xp)(owner: [HYEntoGNWtnT2sW5Fp5CkUrTcsqdSdGXgcWDAknDuyAT](https://solscan.io/account/HYEntoGNWtnT2sW5Fp5CkUrTcsqdSdGXgcWDAknDuyAT)) in the transaction [2bvRQ95vPLcmCbGJiCa7Fr8MhYnQRrWbwjet5CYVJjvmmMAXaEzZZJD7mpXQsg8WiToVVzpvUBzTYSX97pPq8vJa](https://solscan.io/tx/2bvRQ95vPLcmCbGJiCa7Fr8MhYnQRrWbwjet5CYVJjvmmMAXaEzZZJD7mpXQsg8WiToVVzpvUBzTYSX97pPq8vJa). As of 04/18, the tokens has been distributed to multiple addresses and the detailed holder list can be found on the [solana explorer](https://solscan.io/token/6hsQFV7DsSyyVmu6sm4UkvYbpHTJhiUyB8fr4DdhSmkg#holders).

MediumCentralization Related RisksAcknowledged

According to the on-chain data, the following authority involved with RatWif token: - The metadata update authority for the RatWif Token is centralized to a single account [HYEntoGNWtnT2sW5Fp5CkUrTcsqdSdGXgcWDAknDuyAT](https://solscan.io/account/HYEntoGNWtnT2sW5Fp5CkUrTcsqdSdGXgcWDAknDuyAT). This centralization poses a risk as the authority to update token metadata is held by a singular entity, potentially leading to unilateral decisions without community consensus.

Contracts in scope1

Part of RatWif’s security record

RatWif
Audits1 audit by 1 firmLast audit May 2024, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open RatWif’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us