Chain Token

CertiK7 Nov 20211 address on Ethereum

CertiK reviewed Onyx Protocol (Chain Token) on 7 Nov 2021: 3 findings, 0 critical; none marked fixed.

No open critical findings

Open the report Open Onyx Protocol’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings3

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	2	0	0
Medium	0	0	0
Low	1	0	0

HighCentralization RiskOpen

In the contract `ChainToken.sol`, the role `Owner` has the authority over the following function: - pause() - unpause() Any compromise to the `Owner` account may allow the hacker to take advantage of this and pause the token contract. Token holders will not be able to perform token transfer when the token is paused.

HighInitial token distributionOpen

All of the Chain tokens are sent to the contract deployer when deploying the contract. This could be a centralization risk as the deployer can distribute Chain tokens without obtaining the consensus of the community.

LowUnlocked Compiler VersionOpen

The contract has unlocked compiler version. An unlocked compiler version in the source code of the contract permits the user to compile it at or above a particular version. This, in turn, leads to differences in the generated bytecode between compilations due to differing compiler version numbers. This can lead to an ambiguity when debugging as compiler specific bugs may occur in the codebase that would be hard to identify over a span of multiple compiler versions rather than a specific one.