CertiK reviewed ErcProtocol on 16 Jun 2023: 9 findings, 0 critical; 6 marked fixed, 3 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 2 | 0 | 6 |
In the contract `EP` the role `minter` has authority over the functions below. Any compromise to the `minter` account may allow the hacker to take advantage of this authority. - function setMinter(): to set a new `minter`. - function mint(): to mint at most 2% of `totalSupply` to an address. In the contract `GovernorAlpha` the role `guardian` has authority over the functions below. Any compromise to the `guardian` account may allow the hacker to take advantage of this authority. - function _initialize(): to set the `timelock` contract address. In the contract `Timelock` the role `pendingAdmin` has authority over the functions below. Any compromise to the `pendingAdmin` account may allow the hacker to take advantage of this authority. - function acceptAdmin(): to set the `pendingAdmin` as `admin`. In the contract `Timelock` the role `admin` has authority over the functions below. Any compromise to the `admin` account may allow the hacker to take advantage of this authority. - function queueTransaction(): to make a transaction executable after a period of time delay. - function cancelTransaction(): to cancel a transaction. - function executeTransaction(): to execute an executable transaction.
`EP` implements the interface `EPInterface`, but does not inherit from it. ```solidity=5 contract EP { ``` ```solidity=321 interface EPInterface { ```
The return value of an external call is not stored in a local or state variable. ```solidity=196 timelock.queueTransaction(target, value, signature, data, eta); ``` --- ```solidity=204 timelock.executeTransaction{value: proposal.values[i]}(proposal.targets[i], proposal.values[i], proposal.signatures[i], proposal.calldatas[i], proposal.eta); ```
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (4)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us