CertiK reviewed Magical Blocks (Zogi Labs - Bezoge) on 6 Dec 2022: 8 findings, 0 critical; 2 marked fixed, 5 acknowledged, 1 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 3 | 0 |
| Medium | 0 | 2 | 1 |
| Low | 1 | 0 | 1 |
In the function `transferFrom()`, the `msg.sender` will be checked in the blacklist or not. However, the address `from` is not checked. According to the logic of the function `transfer`, the user in the blacklist cannot transfer his/her own tokens. But he/she can bypass this restriction via the function `transferFrom`, by approving the allowance to others.
The functions which are never called internally within the contract should have external visibility for gas optimization. ```solidity=132 function updatePercentageDecimals(uint256 newPercentageDecimals_)public onlyOwner{ ``` --- ```solidity=136 function updateSupportedChains(uint256[]memory chainIds_,bool[]memory chainStatus_)public onlyOwner{ ``` --- ```solidity=140 function pause() public onlyOwner { ``` --- ```solidity=144 function unpause() public onlyOwner { ``` --- ```solidity=19 function mint(address account_, uint256 amount_)public whenNotPaused onlyAdmin{ ``` --- ```solidity=25 function burn(uint256 amount_)public whenNotPaused{ ``` --- ```solidity=31 function blacklistUpdate(address user, bool value) public onlyOwner { ``` --- ```solidity=37 function transfer(address recipient, uint256 amount) public whenNotPaused override(ERC20,IERC20) returns (bool) { ``` --- ```solidity=43 function transferFrom(address from,address to,uint256 amount) public whenNotPaused virtual override(ERC20,IERC20) returns (bool) { ``` --- ```solidity=19 function init(address bezogeToken_, address zogiToken_, uint256 minWrapAmount_, ``` --- ```solidity=34 function wrapBezoge(uint256 amount_)public { ``` --- ```solidity=49 function unWrapBezoge(uint256 amount_)public { ```
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (3)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us