CertiK reviewed Decentrawood (Decentrawood - Audit) on 7 Aug 2024: 3 findings, 0 critical; none marked fixed.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 2 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 1 | 0 | 0 |
In the `Decentrawood` contract: - The `owner` has authority over the following functions: 1. `renounceOwnership`: Renounce the ownership of the contract. 2. `transferOwnership`: Transfer ownership of the contract to a new contract. - The `admin` has authority over the following functions: 1. `allotmentByAdmin`: Allot a certain number of tokens to the specified account. - The `marketingTeamAddress` has authority over the following functions: 1. `allotmentByMarketingTeam`: Allot a certain number of tokens to the specified account. - The `developmentTeamAddress` has authority over the following functions: 1. `allotmentByDevelopmentTeam`: Allot a certain number of tokens to the specified account. - The `strategicAllianceTeamAddress` has authority over the following functions: 1. `allotmentByStrategicAllianceTeam`: Allot a certain number of tokens to the specified account. Compromising the privileged roles within this smart contract could enable attackers to misuse their authority by allotting token to accounts on behalf of themselves. Such actions could result in unfair token distribution.
The initial 100 million `Deod` tokens are sent to several externally-owned account (EOA) addresses [`airdropWalletAddress`](https://polygonscan.com/address/0x4a8ca6f4e245a3573a88fbe5925f445bc1724419) (20 million) and [`liquidityWalletAddress`](https://polygonscan.com/address/0xcf6418116002b1e5681cd3279aab579e53742910) (80 million). This is a centralization risk because the deployer or the owner(s) of the EOAs can distribute tokens without obtaining the consensus of the community. Any compromise to these addresses may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project.
The linked variables assigned in the constructor can be declared as `immutable`. Immutable state variables can be assigned during contract creation but will remain constant throughout the lifetime of a deployed contract. A big advantage of immutable variables is that reading them is significantly cheaper than reading from regular state variables since they will not be stored in storage.
| Address | Chain | Source code |
|---|---|---|
| 0xe77a…52350xe77abb1e75d2913b2076dd16049992ffeaca5235 | Chain: Polygon (POS) | Source code: Verified source |
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us