Open Meta City

CertiK5 Dec 20231 address on Ethereum

Audit

CertiK reviewed Open Meta City on 5 Dec 2023: 2 findings, 0 critical; none marked fixed.

No open critical findings

Open the report Open Open Meta City’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings2

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	2	0	0
Medium	0	0	0
Low	0	0	0

HighCentralization Risks in OMZ.solOpen

In the contract `OpenMetaCity` the role `_owner` has authority over the functions shown in the diagram below. ![](https://accelerator-tasks-prod.acc.corp.certik.com/11ee-8b11-043a0440-b18f-bfabb12c2880/diagrams/centralization_OMZ-OpenMetaCity-_owner.svg) Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and allow/prevent external user access to sensitive functionalities controlled by the `whenNotPaused` modifier.

HighInitial Token DistributionOpen

All of the `OMZ` tokens are sent to the contract deployer or one or several externally-owned account (EOA) addresses. This is a centralization risk because the deployer or the owner(s) of the EOAs can distribute tokens without obtaining the consensus of the community. Any compromise to these addresses may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project.