CertiK reviewed Iskra (Iskra - Audit 5) on 22 Apr 2024: 2 findings, 0 critical; 1 marked fixed, 1 acknowledged.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 0 | 1 |
In the contract `OFTPermit` the role `owner` has authority over the functions shown in the list below. **Inherit `OFTCore` Contract** - function `setMsgInspector()`, to set the message inspector address for the OFT. This is an optional contract that can be used to inspect both `message` and `options`. **Inherit `OAppCore` Contract** - function `setPeer()`, to set the peer address (OApp instance) for a corresponding endpoint. - function `setDelegate()`, to set the delegate address for the OApp. The delegate is capable of making OApp configurations inside of the endpoint. **Inherit `OAppPreCrimeSimulator` Contract** - function `setPreCrime()`, to set the preCrime contract address. **Inherit `OAppOptionsType3` Contract** - function `setEnforcedOptions()`, to set the enforced options for specific endpoint and message type combinations. Provides a way for the OApp to enforce things like paying for PreCrime, AND/OR minimum dst lzReceive gas amounts etc. **Inherit `Ownable` Contract** - `transferOwnership` to set the new owner for the contract. - `renounceOwnership` to set address(0) as the new owner. Any compromise to the `owner` account may allow a hacker to take advantage of this authority, set the inspector address for the OFT, set the peer address and delegate address for the OApp, and set the enforced options for specific endpoint and message type combinations.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us