CertiK reviewed Farmsent on 5 May 2023: 3 findings, 0 critical; none marked fixed.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 2 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 1 | 0 | 0 |
In the contract `FARMSENT` the role `_owner` has authority over the functions shown below.  - `addMultipleAccountToBlacklist(address[] calldata _beneficiaries)`: Adds multiple addresses to the blacklist, preventing them from making token transfers, can only be called by the contract owner. - `addMultipleAccountToWhitelist(address[] calldata _beneficiaries)`: Adds multiple addresses to the whitelist, allowing them to make token transfers when the whitelist feature is enabled, can only be called by the contract owner. - `addToBlacklist(address _beneficiary)`: Adds an address to the blacklist, preventing it from making token transfers, can only be called by the contract owner. - `addToWhitelist(address _beneficiary)`: Adds an address to the whitelist, allowing it to make token transfers when the whitelist feature is enabled, can only be called by the contract owner. - `enableOrDisableWhitelist(bool isWhitelist)`: Enables or disables the whitelist feature, can only be called by the contract owner. - `initialize(string memory name, string memory symbol, uint8 _decimal, uint256 totalSupply)`: Initializes the contract with a token name, symbol, decimal places, and initial supply, can only be called once by the contract owner. - `mint(uint256 amount)`: Mints new tokens and assigns them to the contract owner, can only be called by the contract owner. - `pause()`: Pauses the contract, stopping all token transfers, can only be called by the contract owner. - `removeFromBlacklist(address _beneficiary)`: Removes an address from the blacklist, allowing it to make token transfers again, can only be called by the contract owner. - `removeFromWhitelist(address _beneficiary)`: Removes an address from the whitelist, can only be called by the contract owner. - `unpause()`: Unpauses the contract, allowing token transfers to resume, can only be called by the contract owner. --- In the contract `FARMSENT` the role `_whitelist` has authority over the functions shown below.  - `transferFrom(address from, address to, uint256 amount)`: Transfers tokens from one address to another on behalf of the token holder, can be called by a whitelisted user - `transfer(address to, uint256 amount)`: Transfers tokens from the caller's address to another address, can be called by the caller that is whitelisted if the whitelist feature is enabled, and the caller is not blacklisted. Any compromise to the privileged account may allow the hacker to take advantage of this authority.
All **FarmsentERC20** tokens are sent to the contract deployer when deploying the contract. This is a potential centralization risk as the deployer can distribute **FarmsentERC20** tokens without the consensus of the community.
The linked functions are equivalent to the compiler-generated getter functions for the respective variables.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us