Inspect - Audit

CertiK28 Nov 2023Files named in the report

Audit

CertiK reviewed Inspect (Inspect - Audit) on 28 Nov 2023: 3 findings, 0 critical; 2 marked fixed, 1 open.

No open critical findings

Open the report Open Inspect’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings3

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	1	2
Medium	0	0
Low	0	0

HighCentralization Risks in Inspect.solFixed

In the contract `Inspect`, the role `SNAPSHOT_ROLE` has authority over the function `snapshot`. Any compromise to the `_role` account may allow the hacker to take advantage of this authority and take a snapshot of the current token holding information. In the contract `Inspect`, the role `MINTER_ROLE` has authority over the function `mint`. Any compromise to the `_role` account may allow the hacker to take advantage of this authority and mint token to any account.

HighCentralized Control of Contract UpgradeFixed

`Inspect.sol` are upgradeable contracts, the owner can upgrade the contract without the community's commitment. If an attacker compromises the account, he can change the implementation of the contract and drain tokens from the contract.