Decentrawood - Audit

CertiK1 address on Polygon (POS)

CertiK reviewed Decentrawood (Decentrawood - Audit) on 7 Aug 2024: 3 findings, 0 critical; none marked fixed.

No open critical findings
Open the reportOpen Decentrawood’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings3

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High200
Medium000
Low100
HighCentralization Risks in Decentrawood.solOpen

In the `Decentrawood` contract: - The `owner` has authority over the following functions: 1. `renounceOwnership`: Renounce the ownership of the contract. 2. `transferOwnership`: Transfer ownership of the contract to a new contract. - The `admin` has authority over the following functions: 1. `allotmentByAdmin`: Allot a certain number of tokens to the specified account. - The `marketingTeamAddress` has authority over the following functions: 1. `allotmentByMarketingTeam`: Allot a certain number of tokens to the specified account. - The `developmentTeamAddress` has authority over the following functions: 1. `allotmentByDevelopmentTeam`: Allot a certain number of tokens to the specified account. - The `strategicAllianceTeamAddress` has authority over the following functions: 1. `allotmentByStrategicAllianceTeam`: Allot a certain number of tokens to the specified account. Compromising the privileged roles within this smart contract could enable attackers to misuse their authority by allotting token to accounts on behalf of themselves. Such actions could result in unfair token distribution.

HighInitial Token DistributionOpen

The initial 100 million `Deod` tokens are sent to several externally-owned account (EOA) addresses [`airdropWalletAddress`](https://polygonscan.com/address/0x4a8ca6f4e245a3573a88fbe5925f445bc1724419) (20 million) and [`liquidityWalletAddress`](https://polygonscan.com/address/0xcf6418116002b1e5681cd3279aab579e53742910) (80 million). This is a centralization risk because the deployer or the owner(s) of the EOAs can distribute tokens without obtaining the consensus of the community. Any compromise to these addresses may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project.

LowVariables That Could Be Declared as ImmutableOpen

The linked variables assigned in the constructor can be declared as `immutable`. Immutable state variables can be assigned during contract creation but will remain constant throughout the lifetime of a deployed contract. A big advantage of immutable variables is that reading them is significantly cheaper than reading from regular state variables since they will not be stored in storage.

Contracts in scope1

AddressChainSource code
0xe77abb1e75d2913b2076dd16049992ffeaca5235Chain: Polygon (POS)Source code: Verified source

Part of Decentrawood’s security record

Decentrawood
Audits1 audit by 1 firmLast audit Aug 2024, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open Decentrawood’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us