CertiK reviewed Cyber (Cyberconnect - staking pool) on 9 Apr 2024: 11 findings, 0 critical; 5 marked fixed, 1 acknowledged, 5 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 0 |
| Medium | 0 | 0 | 2 |
| Low | 5 | 0 | 3 |
In the contract `CyberStakingPool` the role `DEFAULT_ADMIN_ROLE` has authority over the functions shown in the diagram below.  - `setBridgeWhitelist(address bridgeAddress, bool isWhitelisted)`: Sets the whitelisting status of a bridge address, allowing or disallowing it for bridging operations. Privileged role: `DEFAULT_ADMIN_ROLE`. Any compromise to the `DEFAULT_ADMIN_ROLE` account may allow the hacker to take advantage of this authority and update the sensitive settings and execute sensitive functions of the project. In the contract `CyberStakingPool` the role `_OPERATOR_ROLE` has authority over the functions shown in the diagram below.  - `setAssetWhitelist(address asset, bool isWhitelisted)`: Sets the whitelisting status of an asset, allowing or disallowing it for deposit and withdrawal. Privileged role: `_OPERATOR_ROLE`. - `pause()`: Pauses the deposit functions in the contract to prevent new deposits. This can be used in emergency situations. Privileged role: `_OPERATOR_ROLE`. - `unpause()`: Unpauses the deposit functions in the contract, allowing new deposits after being paused. Privileged role: `_OPERATOR_ROLE`. Any compromise to the `_OPERATOR_ROLE` account may allow the hacker to take advantage of this authority and update the sensitive settings and execute sensitive functions of the project.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us