Zebec - Rust

CertiKCode version: not recorded (see the report)

CertiK reviewed Zebec (Zebec - Rust) on 30 Mar 2024: 9 findings, 0 critical; 7 marked fixed, 1 acknowledged, 1 open.

No open critical findings
Open the reportOpen Zebec’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High010
Medium001
Low106
HighCentralization Related Risks and UpgradabilityAcknowledged

In program `migration_program`, the role `admin` has privilege over the following instructions: - `emergency_pause()`: maliciously pause the ZBC migration service. - `update_admin()`: grant `admin` role to malicious account. In program `migration_program`, the `ZBCN` role `mint::authority` has privilege over the following instructions: - `mint_to()`: mint `ZBCN` to any account. Any compromise to the privileged roles may allow the hacker to take advantage of this authority. The hackers may manipulate the cross-chain transfers. Such actions could result in financial losses for both the project and its users. Also, the Solana platform allows for the possibility of upgrading its programs, with the default upgrade authority being the entity responsible for deployment. In situations where the program has upgradability features and the account of the upgrade authority becomes compromised, there is the potential for an unauthorized and malicious update to the program.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Zebec’s security record

Zebec
Audits1 audit by 1 firmLast audit Mar 2024, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open Zebec’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us