NetMind

QuantstampRepository at commit d52de61

Audit

Quantstamp reviewed NetMind on 4 Aug 2024: 25 findings, 0 critical; 10 marked fixed, 14 acknowledged, 1 open.

No open critical findings
Open the reportOpen NetMind’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings25

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High023
Medium053
Low174
LowUnbound Critical State VariablesOpen

<br> 1. qs-badge-fixed `AccountManage.updateSignNum()` does not validate that `signNum` is set to a value greater than a reasonable minimum. If `signNum` is zero, anyone can transfer the `providerFeeSum` amount of NMT tokens from the `AccountManage` contract to any address without valid signatures. 1. qs-badge-fixed `CommunityFund.updateLockTime()` does not validate that `LockTime` is within reasonable bounds. If `LockTime` is set far in the past, all funds could immediately become releaseable. Alternatively, if `LockTime` is set far in the future, no funds will be releasable until the `LockTime` is reached. 1. qs-badge-fixed `FinanceToken.launch()` does not validate: 1. A reasonable upper bound for `investmentPeriod`. The `sponsor` cannot initiate a `refund()` if set to a sufficiently high value. 1. A reasonable upper bound for `unlockIntervalDays`. If set to a sufficiently high value, the purchasers may never be able to withdraw all of their NMT tokens. 1. `unlockPercentage` is greater than zero. Purchasers cannot withdraw any of their NMT tokens if set to zero. 1. qs-badge-fixed `LongTermPledge.updateLockPeriod()` does not validate that `lockPeriod` is set to a value less than a reasonable maximum. If `lockPeriod` is set to a large value, users can never unstake their tokens. 1. qs-badge-acknowledged `Purchase.swapToken()` does not validate `_minOut`, which means it can be specified as zero and support unlimited slippage exposing this contract to the vulnerability of a sandwich attack upon swap. 1. qs-badge-acknowledged `RewardPool.init()` and `RewardPool.setSigNum()` do not validate that `SigNum` is set to a value greater than a reasonable minimum. If `SigNum` is set to zero, anyone can call `move()` or `burn()` without valid signatures. 1. qs-badge-fixed `StrategicFund.updateLockTime()` does not validate that `LockTime` is within reasonable bounds. If `LockTime` is set far in the past, all funds could immediately become releaseable. Alternatively, if `LockTime` is set far in the future, no funds will be releasable until the `LockTime` is reached. 1. qs-badge-fixed `TechnologyFund.updateLockTime()` does not validate that `LockTime` is within reasonable bounds. If `LockTime` is set far in the past, all funds could immediately become releaseable. Alternatively, if `LockTime` is set far in the future, no funds will be releasable until the `LockTime` is reached.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (45)

  • https://github.com/NetMind-AI/netmind-contract/contracts/FixedLock.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/TechnologyFund.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/Governor_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/Purchase_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/PriceService_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/LiqudityFundsManage.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/Governor.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/FixedLock_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/RewardPool.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/Pledge.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/Snapshoot_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/CrossChain.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/Pledge_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/Payment_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/NetMindToken_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/CommunityFund.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/Ledger.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/Snapshoot.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/Airdrop.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/FiatoSettle_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/Ledger_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/Reward_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/TrainingTask_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/FinanceToken_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/LongTermPledge_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/Purchase.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/AccountManage_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/AccountManage.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/LongTermPledge.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/StrategicFund_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/TechnologyFund_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/RewardContract.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/LiquidityFundsManage_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/FinanceToken.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/TrainingTask.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/Payment.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/StrategicFund.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/FiatoSettle.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/CrossChain_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/Conf.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/NetMindToken.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/CommunityFund_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/proxy/Conf_proxy.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4
  • https://github.com/NetMind-AI/netmind-contract/contracts/Management.sol at commit d52de6181f400d0b68a496fd5df875a5f47d9ec4

Part of NetMind’s security record

NetMind
Audits1 audit by 1 firmLast audit Aug 2024, by Quantstamp.
Critical findingsNo open critical findingsIn 1 report.
Open NetMind’s security record

Security firm

Quantstamp

236 projects reviewed · 332 reports · latest Oct 2026

See Quantstamp’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us