Sat.is - Audit
CertiK reviewed Sat.is (Sat.is - Audit) on 31 Mar 2023: 19 findings, 0 critical; 17 marked fixed, 1 acknowledged, 1 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Findings19
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 1 | 3 |
| Low | 1 | 0 | 13 |
MediumIncompatibility with Deflationary TokensAcknowledged
When transferring deflationary ERC20 tokens, the input amount may not be equal to the received amount due to the charged transaction fee. For example, if a user sends 100 deflationary tokens (with a 10% transaction fee), only 90 tokens actually arrived to the contract. However, a failure to discount such fees may allow the same user to withdraw 100 tokens from the contract, which causes the contract to lose 10 tokens in such a transaction. Reference: https://thoreum-finance.medium.com/what-exploit-happened-today-for-gocerberus-and-garuda-also-for-lokum-ybear-piggy-caramelswap-3943ee23a39f
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (14)
- contracts/v2/satis_core/MoneyPoolRaw.sol
- contracts/v2/sigma_mining/SigmaAction.sol
- contracts/v2/satis_core/Action.sol
- contracts/v2/satis_core/MoneyPoolProxy.sol
- contracts/v2/lib_and_interface/IMoneyPoolRaw.sol
- contracts/v2/lib_and_interface/ISigmaAction.sol
- contracts/v2/sigma_mining/SigmaPoolRaw.sol
- contracts/v2/sigma_mining/SigmaPoolProxy.sol
- contracts/v2/lib_and_interface/SafeERC20.sol
- contracts/v2/lib_and_interface/SafeMath.sol
- contracts/v2/lib_and_interface/ISigmaPoolRaw.sol
- contracts/v2/lib_and_interface/IAction.sol
- contracts/v2/lib_and_interface/IERC20.sol
- contracts/v2/lib_and_interface/Address.sol
Part of Sat.is’s security record
Security firm
CertiK1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us