GOATAI-Token
Audit · firm’s term: audit report
QuillAudits reviewed GOATAI-Token on 7 Mar 2025: 2 findings, 0 critical; all marked fixed.
Report hosted on quillaudits.com.
Trustblock does not review code.
Findings2
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 0 | 1 |
MediumUnintended Permanent Loss of Admin Control Through Role RenouncementFixed
The contract inherits OpenZeppelin's AccessControl but doesn't override renounceRole. This means the admin (who has DEFAULT_ADMIN_ROLE) can renounce their role.<br>If the admin renounces DEFAULT_ADMIN_ROLE.<br>Then no one can grant new roles,no one can set LP pairs, no one can set exemptions and Admin functions become permanently inaccessible
LowUse Named Constants Instead of Magic Numbers for Exempt Accounts LimitFixed
The <strong>setExempt</strong> function uses a hardcoded number <strong>20</strong> as the maximum accounts limit. Similar to how <strong>MAX_NUM_RECIPIENTS</strong> and <strong>MAX_FEE_BPS</strong> are defined as constants, this limit should also be defined as a named constant for maintainability.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
- GOATAI_ERC20.sol
Part of GOATAI-Token’s security record
GOATAI-TokenSecurity firm
QuillAudits350 projects reviewed · 459 reports · latest Apr 2025
See QuillAudits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us