CertiK reviewed Seed.Photo (Seed - Audit) on 26 Dec 2023: 6 findings, 0 critical; 3 marked fixed, 3 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 1 |
| Medium | 0 | 0 | 0 |
| Low | 2 | 0 | 2 |
In the contract `Ownable` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and do the following: - `renounceOwnership()`, maliciously give up the ownership. - `transferOwnership()`, maliciously transfer ownership to any account.  In the contract `SEED` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and do the following: - `freezeAccount()`, maliciously protect any valid address from transferring assets. - `thawedAccount()`, maliciously allow any invalid address to transfer assets. 
The change of `_owner` by function `transferOwnership()` overrides the previously set `_owner` with the new one without guaranteeing the new `_owner` is able to actuate transactions on-chain.
According to the code logic of `_beforeTokenTransfer()` function, we know that the frozen accounts just cannot transfer token, but they can still receive token from others. ```solidity=658 function _beforeTokenTransfer(address from, address to, uint256 amount) internal virtual override(ERC20) { require(!frozenAccounts[from], "Frozen Account Can not Transfer Token,Please Contact the Support Team!"); super._beforeTokenTransfer(from, to, amount); } ```
| Address | Chain | Source code |
|---|---|---|
| 0x6730…b7f70x6730f7a6bbb7b9c8e60843948f7feb4b6a17b7f7 | Chain: BNB Chain | Source code: Verified source |
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us