CertiK reviewed DeepBrain Chain (DeepBrainChain) on 30 Dec 2024: 10 findings, 1 critical; 7 marked fixed, 1 acknowledged, 2 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 1 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 2 | 0 | 6 |
The Logic.sol contract serves as the implementation layer in a proxy-implementation system. In this architecture, the proxy contract's admin role retains the authority to upgrade the implementation contract associated with the proxy. If the admin account is compromised, an attacker could exploit this privilege to replace the implementation contract with a malicious one. This would allow the execution of arbitrary and potentially harmful functionality via the proxy. Furthermore, precompiled contracts (i.e., logic) within the system are upgradable. Network upgrades can introduce new precompiles or modify existing ones, and updates to their dependencies may also introduce unexpected changes or uncertainties. These factors could impact the system's security and functionality if not carefully managed. --- Update with commit [97c12df76551ab9b91d7c77dffd777e83c7f399c](https://github.com/DeepBrainChain/DBC-Contracts/tree/97c12df76551ab9b91d7c77dffd777e83c7f399c), the `logic` contract is upgraded as `UUPSUpgradeable` and the following authorities has been added: - `canUpgradeAddress` has the privileged authority to upgrade the contract -`owner`: - `setUpgradePermission()`: Update the `canUpgradeAddress`. - `renounceOwnership()`: Leaves the contract without owner. - `transferOwnership()`: Transfers ownership of the contract to a new account (`newOwner`). Also, it is worth mentioning the precompile contracts are also upgradable along with the ecosystem update.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (2)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us