NoriGO!
CertiK reviewed NoriGO! on 23 Jul 2022: 13 findings, 0 critical; 2 marked fixed, 3 acknowledged, 8 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Findings13
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 3 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 8 | 0 | 1 |
HighCentralization Related Risks In Asset HolderAcknowledged
In the contract `NoriGO`, there are two fee collectors `liquidityAddress1` and `liquidityAddress2` used to gather the LP Token when calling the function `addLiquidity()` and `addLiquidityEth()`. In the contract `NoriGO`, there is an asset holder account called `projectAddress`, which is used to gather ETH and `STABLECOIN` tokens when swapping. Over time, these aforementioned accounts would gain many assets.
HighCentralization Risks in NoriGO.solAcknowledged
In the contract `NoriGO` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority, update the configuration of the contract, and transfer assets.  In the contract `Ownable` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and change the ownership of the contract.  In the contract `TokenHandler` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and transfer assets of the contract. 
HighInitial Token DistributionAcknowledged
All of the `NORI` tokens are sent to the contract deployer when deploying the contract. This could be a centralization risk as the deployer can distribute `NORI` tokens without obtaining the consensus of the community.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
- contracts/NoriGO.sol
Part of NoriGO!’s security record
Security firm
CertiK1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us