brother id audit
Audit · firm’s term: audit
Cairo Security Clan reviewed Brother (brother id audit) on 24 Dec 2024: 9 findings, 0 critical; all marked fixed.
Trustblock does not review code.
Findings9
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 0 | 8 |
MediumDomain ownership ambiguity enabled by inconsistent management of tokenid when expired domains are repurchasedFixed
Once an expired domain is repurchased, it can still be transferred using its old tokenid due to the contract not updating or clearing the old _token_id_to_domain mapping. This allows the previous owner to transfer the domain to another address without the current owner's consent, essentially renewing the domain at the expense of the current owner's purchase. Consider implementing a mechanism to maintain unique tokenids for each domain, even when repurchased after expiration.
LowConfusing function name eth_contractFixed
The report gives no description here.
LowDomain renewal overwrites remaining registration periodFixed
The report gives no description here.
LowExpired domains can be transferredFixed
The report gives no description here.
LowPrimary domain gets reset on transfer when user owns multiple domainsFixed
The report gives no description here.
LowUnchecked return value of erc20 transferfrom in register_domain and renew_domainFixed
The report gives no description here.
LowUnnecessary caller checkFixed
The report gives no description here.
LowUnused codeFixed
The report gives no description here.
LowUnused storage variableFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
- brother_id.cairo
Part of Brother’s security record
BrotherSecurity firm
Cairo Security Clan13 projects reviewed · 21 reports · latest Sep 2025
See Cairo Security Clan’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us