CyberConnect - cybergraph

CertiK4 Mar 2024Files named in the report

Audit

CertiK reviewed Cyber (CyberConnect - cybergraph) on 4 Mar 2024: 2 findings, 0 critical; 1 acknowledged, 1 open.

No open critical findings

Open the report Open Cyber’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings2

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged
Critical	0	0
High	0	1
Medium	0	0
Low	1	0

HighCentralization Risks in LaunchTokenPool.solAcknowledged

In the contract `LaunchTokenPool` the role `owner` has authority over the functions shown in the diagram below. ![](https://accelerator-tasks-prod.acc.corp.certik.com/11ee-d5ec-0941a800-b79c-11e04cb30ebf/diagrams/centralization_LaunchTokenPool-LaunchTokenPool-owner.svg) - `withdraw(address to, uint256 amount)`: Allows the owner to withdraw CYBER tokens from the contract. Accessible only by the owner. - `withdrawERC20(address currency, address to, uint256 amount)`: Allows the owner to withdraw any ERC20 tokens from the contract. Accessible only by the owner. - `pause()`: Allows the owner to pause the contract, which prevents deposits. Accessible only by the owner. - `unpause()`: Allows the owner to unpause the contract, which enables deposits. Accessible only by the owner. Any compromise to the `owner` account may allow the hacker to take advantage of this authority and update the sensitive settings and execute sensitive functionalities of the protocol.