DeepBrainChain

CertiKFiles named in the report

CertiK reviewed DeepBrain Chain (DeepBrainChain) on 30 Dec 2024: 10 findings, 1 critical; 7 marked fixed, 1 acknowledged, 2 open.

1 critical finding, fixed
Open the reportOpen DeepBrain Chain’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings10

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High010
Medium000
Low206
HighCentralized Control of Contract UpgradeAcknowledged

The Logic.sol contract serves as the implementation layer in a proxy-implementation system. In this architecture, the proxy contract's admin role retains the authority to upgrade the implementation contract associated with the proxy. If the admin account is compromised, an attacker could exploit this privilege to replace the implementation contract with a malicious one. This would allow the execution of arbitrary and potentially harmful functionality via the proxy. Furthermore, precompiled contracts (i.e., logic) within the system are upgradable. Network upgrades can introduce new precompiles or modify existing ones, and updates to their dependencies may also introduce unexpected changes or uncertainties. These factors could impact the system's security and functionality if not carefully managed. --- Update with commit [97c12df76551ab9b91d7c77dffd777e83c7f399c](https://github.com/DeepBrainChain/DBC-Contracts/tree/97c12df76551ab9b91d7c77dffd777e83c7f399c), the `logic` contract is upgraded as `UUPSUpgradeable` and the following authorities has been added: - `canUpgradeAddress` has the privileged authority to upgrade the contract -`owner`: - `setUpgradePermission()`: Update the `canUpgradeAddress`. - `renounceOwnership()`: Leaves the contract without owner. - `transferOwnership()`: Transfers ownership of the contract to a new account (`newOwner`). Also, it is worth mentioning the precompile contracts are also upgradable along with the ecosystem update.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (2)

  • system/contracts/bridge/Bridge.sol
  • system/contracts/logic/Logic.sol

Part of DeepBrain Chain’s security record

DeepBrain Chain
Audits1 audit by 1 firmLast audit Dec 2024, by CertiK.
Critical findingsNo open critical findingsIn that report, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open DeepBrain Chain’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us