Cheelee

CertiKFiles named in the report

CertiK reviewed Cheelee on 7 Feb 2023: 14 findings, 0 critical; 11 marked fixed, 3 open.

No open critical findings
Open the reportOpen Cheelee’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings14

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High300
Medium001
Low0010
MediumLack of Validation for Vesting AmountsFixed

The following values are critical to the contract vesting logic and should be validated to ensure they are set to values that do not disrupt contract logic. - beneficiary[_beneficiaryAddress].duration = _durationSeconds; - beneficiary[_beneficiaryAddress].cliff = _cliff; - beneficiary[_beneficiaryAddress].amount += _amount; For example, there should be a check ensuring that `_durationSeconds` > 0.

LowComparison to Boolean ConstantFixed

Boolean constants can be used directly and do not need to be compared to true or false. ```solidity=45 if (registeredUserMap[msg.sender] == false) { ``` --- ```solidity=117 require(usedSignature[_nonce] == false, "Signature already used"); ``` --- ```solidity=142 require(usedSignature[_nonce] == false, "Signature already used"); ```

LowDifferent Solidity VersionsFixed

Multiple Solidity versions are used in the codebase. Versions used: `^0.8.0`, `^0.8.4`, and `^0.8.13`

LowERC20Permit NameFixed

According to the OpenZeppelin library `draft-ERC20Permit.sol`, it is recommended to use the same `name` for the ERC20Permit declaration that is defined as the ERC20 token name.

LowFunctions Should Be Declared `external`Fixed

Functions which are never called internally by the contract should have external visibility for gas optimization.

LowMissing Emit EventsFixed

There should always be events emitted in the sensitive functions that are controlled by centralization roles.

LowMissing Zero Address ValidationFixed

Addresses should be checked before assignment or external call to make sure they are not zero addresses.

LowToo Many DigitsFixed

Literals with many digits are difficult to read and review. ```solidity=10 uint256 public constant MAX_AMOUNT = 1000000000 * 10**18; ``` --- ```solidity=8 uint256 public constant MAX_VALUE = 7000000000 * 10**18; ``` --- ```solidity=11 uint256[] public emission = [ 1750000000000000000000000000, 3150000000000000000000000000, 4550000000000000000000000000, 5600000000000000000000000000, 6300000000000000000000000000, MAX_VALUE ]; ```

LowTyposFixed

In the contract `LEE.sol`, there are two typographical errors to be changed. 1. "CHEELEE" is misspelled in the constructor on line 25 2. Grammatical error in the error message on line 32, which should be changed to the following: ```solidity=32 "Can't mint more than max amount" ``` ---- In the contracts `IVesting.sol` and `MultiVesting.sol`, the function `emergancyVest()` is misspelled and should be changed to the following: ```solidity function emergencyVest() external; ```

LowUnchecked ERC-20 `transfer()`/`transferFrom()` CaFixed

The return value of the `transfer()`/`transferFrom()` call is not checked.

Show 1 more
LowUse of `ether` For UnitsFixed

The use of the unit **ether** for the uint arrays `minAmount` and `maxAmount` can be misleading and cause confusion, as the amounts are referring to tokens and not **Ether**, the native cryptocurrency for the Ethereum blockchain.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (10)

  • contracts/LEE.sol
  • contracts/interfaces/CustomNFT.sol
  • contracts/Staking.sol
  • contracts/interfaces/IERC20Mintable.sol
  • contracts/NFTSale.sol
  • contracts/interfaces/IVesting.sol
  • contracts/CHEEL.sol
  • contracts/Treasury.sol
  • contracts/MultiVesting.sol
  • contracts/NFT.sol

Part of Cheelee’s security record

Cheelee
Audits1 audit by 1 firmLast audit Feb 2023, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open Cheelee’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us