CertiK reviewed Zebec (Zebec - Rust) on 30 Mar 2024: 9 findings, 0 critical; 7 marked fixed, 1 acknowledged, 1 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 1 | 0 | 6 |
In program `migration_program`, the role `admin` has privilege over the following instructions: - `emergency_pause()`: maliciously pause the ZBC migration service. - `update_admin()`: grant `admin` role to malicious account. In program `migration_program`, the `ZBCN` role `mint::authority` has privilege over the following instructions: - `mint_to()`: mint `ZBCN` to any account. Any compromise to the privileged roles may allow the hacker to take advantage of this authority. The hackers may manipulate the cross-chain transfers. Such actions could result in financial losses for both the project and its users. Also, the Solana platform allows for the possibility of upgrading its programs, with the default upgrade authority being the entity responsible for deployment. In situations where the program has upgradability features and the account of the upgrade authority becomes compromised, there is the potential for an unauthorized and malicious update to the program.
The report names a repository or files. Open the report to see its scope.
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us