CertiK reviewed Disney (Disney (DIS)) on 23 Jun 2023: 5 findings, 0 critical; 2 marked fixed, 3 acknowledged.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 2 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 2 | 0 |
In the contract `Disney` the role `_owner` has authority over the functions below: - upgradeTo - upgradeToAndCall - pause - unpause - mint Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and pause/unpause the contract, mint tokens and upgrade the contract.
In the contract Disney, the role `admin` has the authority to update the implementation contract behind the proxy contract. Any compromise to the `admin` account may allow a hacker to take advantage of this authority and change the implementation contract which is pointed by proxy and therefore execute potential malicious functionality in the implementation contract.
| Address | Chain | Source code |
|---|---|---|
| 0x74d1…76340x74d11b742ca7be933c175c48f7a409c908a17634 | Chain: BNB Chain | Source code: Verified source |
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us