ACENT Mainnet
CertiK reviewed ACENT (ACENT Mainnet) on 15 Nov 2022: 47 findings, 1 critical; 9 marked fixed, 38 open.
The original report was removed from its address (seen 17 Oct 2026).
Trustblock does not review code.
Findings47
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 12 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 26 | 0 | 7 |
CriticalLogic Flaw In `emergencyWithdraw()`Fixed
File: Virgo.sol When `msg.sender` calls the function `enterStaking()`, `spica` token will be minted to the `msg.sender` when `pool.lpToken` is staked into the contract. However, if the `msg.sender` calls `emergencyWithdraw()`, the `pool.lpToken` can be transferred back to the `msg.sender` but the `spica` token that has been minted to the `msg.sender` will not be burnt. Therefore, `msg.sender` can call `enterStaking()` and `emergencyWithdraw()` repeatedly to ultimately mint a huge amount of `spica` token, with just the same amount of `pool.lpToken`.
MediumInconsistency About The Swap FeesFixed
File: AcentPair.sol Currently, when swap tokens through the acent routers, the swap fee is 3‰, but in the acent pairs it uses 2‰ to check the balance.
LowDivide by ZeroFixed
File: AcentPair.sol The call to `burn()` function will fail if the value of `totalSupply` is 0.
LowInconsistent Comment and CodeFixed
File: AcentPair.sol According to the comment, the linked statement should be `uint denominator = rootK.mul(5).add(rootKLast);`. The current calculation results in the minted liquidity being greater than 1/6th of the growth in sqrt(k).
LowMissing `emit` KeywordFixed
File: WACE.sol The `emit` keyword should be used when an event is triggered to print program log information.
LowMissing Input ValidationFixed
File: FundDistributor.sol Since there is no restriction on calling the "addBenificiary()" function to add two identical addresses, duplicate benificiaries may appear in "benificiaries". If duplicate benificiaries do exist, then the benificiary may not be cleanly removed.
LowMissing Input ValidationFixed
The given input is missing the check for the validation and the zero-address.
LowMutability Specifiers MissingFixed
The linked variables are assigned only once, either during their contract-level declaration or during the `constructor`'s execution.
LowVariables That Could Be Declared as `constant`Fixed
The linked variables could be declared as `constant` since these state variables are never modified.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (40)
- Core/Acent Swap Smart Contract/ace-swap-core-sh/contracts/interfaces/IAcentERC20.sol
- Core/Acent Swap Smart Contract/deploy_periphery2/contracts/interfaces/IERC20.sol
- Core/Acent Swap Smart Contract/Ade-Farm/contracts/ADEInitMintable.sol
- Core/Acent Swap Smart Contract/deploy_periphery2/contracts/interfaces/IADEFactory.sol
- Core/Acent Swap Smart Contract/deploy_periphery2/contracts/ADERouter.sol
- Core/Acent Swap Smart Contract/ace-swap-core-sh/contracts/AcentPair.sol
- Core/Acent Swap Smart Contract/Ade-Farm/contracts/ADEVault.sol
- Core/Acent Swap Smart Contract/ace-swap-core-sh/contracts/AcentERC20.sol
- Core/Acent Swap Smart Contract/Ade-Farm/contracts/Supercluster.sol
- Core/Acent Swap Smart Contract/Ade-Farm/contracts/Virgo.sol
- Core/Acent Swap Smart Contract/ace-swap-core-sh/contracts/libraries/SafeMath.sol
- Core/Acent Swap Smart Contract/deploy_periphery2/contracts/libraries/ADEOracleLibrary.sol
- Core/Acent Swap Smart Contract/Ade-Farm/contracts/Spica.sol
- Core/Acent Swap Smart Contract/deploy_periphery2/contracts/RealAdeRouter.sol
- Core/POSA Smart Contract/contracts/FundDistributor.sol
- Core/Acent Swap Smart Contract/deploy_periphery2/contracts/WACE.sol
- Core/Acent Swap Smart Contract/ace-swap-core-sh/contracts/interfaces/IAcentCallee.sol
- Core/Acent Swap Smart Contract/Ade-Farm/contracts/ADEToken.sol
- Core/Acent Swap Smart Contract/deploy_periphery2/contracts/interfaces/IADEMigrator.sol
- Core/Acent Swap Smart Contract/deploy_periphery2/contracts/interfaces/IADERouter01.sol
- Core/Acent Swap Smart Contract/Ade-Farm/contracts/Timelock.sol
- Core/Acent Swap Smart Contract/Ade-Farm/contracts/libs/WACE.sol
- Core/Acent Swap Smart Contract/deploy_periphery2/contracts/libraries/ADELibrary.sol
- Core/Acent Swap Smart Contract/ace-swap-core-sh/contracts/interfaces/IAcentFactory.sol
- Core/Acent Swap Smart Contract/deploy_periphery2/contracts/interfaces/IADEPair.sol
- Core/Acent Swap Smart Contract/Ade-Farm/contracts/ISupercluster.sol
- Core/Acent Swap Smart Contract/ace-swap-core-sh/contracts/interfaces/IERC20.sol
- Core/Acent Swap Smart Contract/deploy_periphery2/contracts/interfaces/IWETH.sol
- Core/Acent Swap Smart Contract/deploy_periphery2/contracts/interfaces/V1/IADEV1Exchange.sol
- Core/Acent Swap Smart Contract/deploy_periphery2/contracts/ADERouter01.sol
- Core/Acent Swap Smart Contract/ace-swap-core-sh/contracts/libraries/UQ112x112.sol
- Core/Acent Swap Smart Contract/deploy_periphery2/contracts/libraries/SafeMath.sol
- Core/Acent Swap Smart Contract/Ade-Farm/contracts/VirgoAdmin.sol
- Core/Acent Swap Smart Contract/deploy_periphery2/contracts/interfaces/IADERouter02.sol
- Core/Acent Swap Smart Contract/ace-swap-core-sh/contracts/libraries/Math.sol
- Core/Acent Swap Smart Contract/deploy_periphery2/contracts/ADEMigrator.sol
- Core/Acent Swap Smart Contract/Ade-Farm/contracts/libs/Multicall2.sol
- Core/Acent Swap Smart Contract/deploy_periphery2/contracts/interfaces/V1/IADEV1Factory.sol
- Core/Acent Swap Smart Contract/ace-swap-core-sh/contracts/AcentFactory.sol
- Core/Acent Swap Smart Contract/ace-swap-core-sh/contracts/interfaces/IAcentPair.sol
Part of ACENT’s security record
ACENTSecurity firm
CertiK1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us