CertiK reviewed Labrado (Labrado - Audit) on 17 Oct 2022: 11 findings, 1 critical; 4 marked fixed, 1 acknowledged, 6 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 1 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 6 | 0 | 3 |
In the contract `LabradoRouter02` the role `admin` has authority over the functions shown in the diagram below. Any compromise to the `admin` account may allow the hacker to take advantage of this authority.  In the contract `LabradoFactory` the role `admin` has authority over the functions shown in the diagram below. Any compromise to the `admin` account may allow the hacker to take advantage of this authority.  In the contract `LabradoPair` the role `factory` has authority over the functions shown in the diagram below. Any compromise to the `factory` account may allow the hacker to take advantage of this authority.  In the contract `LabradoPair` the role `routers` has authority over the functions shown in the diagram below. Any compromise to the `routers` account may allow the hacker to take advantage of this authority.  In the contract `Excalibur` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority.  In the contract `LabradoToken` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority.  In the contract `LabradoBaseNFT` the role `DEFAULT_ADMIN_ROLE` has authority over the following functions. - `setBaseUri()` Any compromise to the `DEFAULT_ADMIN_ROLE` account may allow the hacker to take advantage of this authority. In the contract `LabradoBaseNFT` the role `MINTER_ROLE` has authority over the following functions. - `mint()` - `mintByBatch()` Any compromise to the `MINTER_ROLE` account may allow the hacker to take advantage of this authority. In the contract `LabradoOperator` the role `DEFAULT_ADMIN_ROLE` has authority over the following functions. - `setSupportTokens()` - `setSupportNfts()` - `setOperatorWalletTokens()` - `setOperatorWalletNFTs()` - `pause()` - `unpause()` - `withdrawTokensStuck()` - `withdrawAllTokensStuck()` Any compromise to the `DEFAULT_ADMIN_ROLE` account may allow the hacker to take advantage of this authority. In the contract `LabradoOperator`, the users' tokens and native tokens will be stored in two wallet accounts, `operatorWalletTokens` and `operatorWalletNFTs`. Any compromise to the `operatorWalletTokens` account and `operatorWalletNFTs` account may allow the hacker to take advantage of this authority.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (29)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us