CertiK reviewed Seed.Photo (Seed - Audit) on 26 Dec 2023: 6 findings, 0 critical; 3 marked fixed, 3 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 1 |
| Medium | 0 | 0 | 0 |
| Low | 2 | 0 | 2 |
All of the 1826000000 * 10 ** 18 tokens are sent to the contract deployer or one or several externally-owned account (EOA) addresses. This is a centralization risk because the deployer or the owner(s) of the EOAs can distribute tokens without obtaining the consensus of the community. Any compromise to these addresses may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project.
The cited address input is missing a check that it is not `address(0)`. ```solidity=638 function freezeAccount(address addr) public onlyOwner { require(!frozenAccounts[addr], "Account is already Frozen!"); require(addr != owner(), "Owner can not be frozen"); frozenAccounts[addr] = true; emit AccountFrozen(addr); } // freezeAccount ```
The contracts cited have an unlocked compiler version. An unlocked compiler version in the source code of the contract permits the user to compile it at or above a particular version. This, in turn, leads to differences in the generated bytecode between compilations due to differing compiler version numbers. This can lead to ambiguity when debugging, as compiler specific bugs may occur in the codebase that would be hard to identify over a span of multiple compiler versions rather than a specific one.
| Address | Chain | Source code |
|---|---|---|
| 0x6730…b7f70x6730f7a6bbb7b9c8e60843948f7feb4b6a17b7f7 | Chain: BNB Chain | Source code: Verified source |
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us