Cyberconnect - cybervesting
CertiK reviewed Cyber (Cyberconnect - cybervesting) on 15 Aug 2023: 5 findings, 0 critical; 1 acknowledged, 4 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Findings5
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 0 |
| Medium | 1 | 0 | 0 |
| Low | 3 | 0 | 0 |
MediumLack of validations in the `recoverERC20()` functOpen
The owner can call `recoverERC20()` to transfer any ERC20 tokens from the `CyberVesting` contract. If the owner withdraws a portion of the Cyber tokens before the release end time, `_start + _duration * _numVestings`, there will not be enough tokens to release.
LowLack of input validation for `start_`Open
The input `start_` of constructor is missing a check to ensure it is greater than `block.timestamp`.
LowLack of sanity check to ensure the Cyber token isOpen
The `CyberVesting` contract lacks a sanity check to ensure the Cyber token balance is sufficient to be released.
LowMissing Emit EventsOpen
There should always be events emitted in the sensitive functions that are controlled by centralization roles.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
- src/core/CyberVesting.sol
Part of Cyber’s security record
CyberSecurity firm
CertiK1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us