Mantisco (Megalink Token) - audit

CertiK29 Dec 20231 address on BNB Chain

CertiK reviewed Mega8.io (Mantisco (Megalink Token) - audit) on 29 Dec 2023: 4 findings, 0 critical; 2 acknowledged, 2 open.

No open critical findings

Open the report Open Mega8.io’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings4

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged
Critical	0	0
High	0	2
Medium	0	0
Low	2	0

HighCentralization Risks in MegalinkToken.solAcknowledged

In the contract `MegalinkToken` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority to burn the owner's tokens. ![](https://accelerator-tasks-prod.acc.corp.certik.com/11ee-a017-f040bad0-b17f-8f5ab4dbfe65/diagrams/centralization_MegalinkToken-MegalinkToken-_owner.svg) In the contract `Ownable` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority to transfer the ownership. ![](https://accelerator-tasks-prod.acc.corp.certik.com/11ee-a017-f040bad0-b17f-8f5ab4dbfe65/diagrams/centralization_MegalinkToken-Ownable-_owner.svg) ### Onchain Analysis As of December 22nd, 2023, the owner of [0xf9284DC0F33f1c28B0Fa8d1A92c4F7Eea6CcE81f](https://bscscan.com/address/0xf9284DC0F33f1c28B0Fa8d1A92c4F7Eea6CcE81f) is still the creator [0x90B73C48F420aF66F5e17dE4e00cFA9431FDf8c9](https://bscscan.com/address/0x90b73c48f420af66f5e17de4e00cfa9431fdf8c9).

HighInitial Token DistributionAcknowledged

All of the `MegalinkToken` tokens are sent to the contract deployer or one or several externally-owned account (EOA) addresses. This is a centralization risk because the deployer or the owner(s) of the EOAs can distribute tokens without obtaining the consensus of the community. Any compromise to these addresses may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project. ### Onchain Analysis As of December 22nd, 2023, all tokens of [0xf9284DC0F33f1c28B0Fa8d1A92c4F7Eea6CcE81f](https://bscscan.com/address/0xf9284DC0F33f1c28B0Fa8d1A92c4F7Eea6CcE81f) are held in the creator [0x90b73c48f420af66f5e17de4e00cfa9431fdf8c9](https://bscscan.com/address/0x90b73c48f420af66f5e17de4e00cfa9431fdf8c9).