Centaurify - Genesis Mint

CertiK27 Sep 2022Files named in the report

CertiK reviewed Centaurify (Centaurify - Genesis Mint) on 27 Sep 2022: 8 findings, 0 critical; 7 marked fixed, 1 acknowledged.

No open critical findings

Open the report Open Centaurify’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings8

Statuses are the security firm’s own, from its report.

Severity	Acknowledged	Fixed
Critical	0	0
High	1	0
Medium	0	0
Low	0	7

LowExcessive paid Tokens cannot be refundedFixed

In cases where users overpays for minting NFTs, users do not have any functions to get refunded. All the funds will be sent to the `recipient` address. Therefore, if a user mistakenly overpays, he might lose those tokens forever.

LowHard coded mint sale periodsFixed

The mint periods are currently hardcoded within various functions that initiate the parameters and the start of each NFT minting phase.

LowInconsistencies in error messageFixed

The error messages for the Merkle Leaf verification don't match within the mint verification sections of various functions.

LowMissing Emit EventsFixed

The function that affects the status of sensitive variables should be able to emit events as notifications.

LowUnchecked Value of ERC-20 `transfer()` CallFixed

The linked `transfer()` invocation does not check the return value of the function call which should yield a `true` result in case of proper ERC-20 implementation.

LowUnused VariableFixed

The variable `error NotAuthorized()` is declared but the current code logic doesn't use it.

LowVariables That Could Be Declared as `constant`Fixed

The linked variables could be declared as `constant` since these state variables are never modified.