NEST Protocol

CertiK15 Jul 2022Files named in the report

Audit

CertiK reviewed NEST Protocol on 15 Jul 2022: 13 findings, 0 critical; 7 marked fixed, 2 acknowledged, 4 open.

No open critical findings

Open the report Open NEST Protocol’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings13

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	2	0
Medium	0	0	1
Low	4	0	6

HighCentralization Risks in NestBase.solAcknowledged

In the contract `NestBase` the role `governance` has authority over the functions shown in the diagram below. Any compromise to the `governance` account may allow the hacker to take advantage of this authority. ![](https://accelerator-tasks-prod.acc.corp.certik.com/c79aa422b2cb4961b7a375bf007f9e0f/diagrams/centralization_NestBase-NestBase-governance.svg)

HighCentralization Risks In NestBatchMining.solAcknowledged

In the contract `NestBatchMining` : The role `governance` has authority over the functions listed below: - Function `setConfig()` : Modifying Nest mining configuration. For each channel defined in `NestBatchMining`, the role `channel.opener` has authority over the functions listed below: - Function `modify()` : Modify channel configuration. The opener of each channel can withdraw assets from this channel, which may be deposited by other users. - Function `decrease()`: Withdraw assets from this channel. Any compromise to the privileged accounts may allow the hacker to take advantage of this authority.