Cipher - audit

CertiK1 address on Polygon (POS)

CertiK reviewed Cipher (CPR) (Cipher - audit) on 13 Nov 2023: 2 findings, 0 critical; 1 marked fixed, 1 acknowledged.

No open critical findings
Open the reportOpen Cipher (CPR)’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings2

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High011
Medium000
Low000
HighCentralization Related RisksFixed

In the contract `AccessControl` the role `adminRole` has authority over the following functions: - grantRole() - revokeRole() Any compromise to the `adminRole` account may allow the hacker to take advantage of this authority and grant associated role to any account or revoke the role from any account. Note that `DEFAULT_ADMIN_ROLE` is the admin role for all roles. ----------- In the contract `AccessControl` the role `role` has authority over the following function: - renounceRole() Any compromise to the `role` account may allow the hacker to take advantage of this authority and renounce corresponding privileges to functions within other contracts. --- In the contract `Ownable` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and transfer or renounce the ownership. ![](https://accelerator-tasks-prod.acc.corp.certik.com/11ee-7676-30a767c0-bfea-dd00c2dfc4e7/diagrams/centralization_PowerfulERC20-Ownable-_owner.svg) --- In the contract `PowerfulERC20` the role `MINTER_ROLE` has authority over the function shown in the diagram below. Any compromise to the `MINTER_ROLE` account may allow a hacker to take advantage of this authority and mint an arbitrary amount of tokens. In this case, the inflation of the token could lead to significant fluctuation of the price. ![](https://accelerator-tasks-prod.acc.corp.certik.com/11ee-7676-30a767c0-bfea-dd00c2dfc4e7/diagrams/centralization_PowerfulERC20-PowerfulERC20-MINTER_ROLE.svg) --- In the contract `PowerfulERC20` the role `_owner` has authority over the function shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and disable the mint functionality. ![](https://accelerator-tasks-prod.acc.corp.certik.com/11ee-7676-30a767c0-bfea-dd00c2dfc4e7/diagrams/centralization_PowerfulERC20-PowerfulERC20-_owner.svg) --- In the contract `TokenRecover` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and transfer tokens locked in the contract. ![](https://accelerator-tasks-prod.acc.corp.certik.com/11ee-7676-30a767c0-bfea-dd00c2dfc4e7/diagrams/centralization_PowerfulERC20-TokenRecover-_owner.svg)

Contracts in scope1

AddressChainSource code
0xaa404804ba583c025fa64c9a276a6127ceb355c6Chain: Polygon (POS)Source code: Verified source

Part of Cipher (CPR)’s security record

Cipher (CPR)
Audits2 audits by 2 firmsLast audit Nov 2023, by CertiK.
Critical findingsNo open critical findingsAcross 2 reports.
Open Cipher (CPR)’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us