Next Level Game

CertiKCode version: not recorded (see the report)

CertiK reviewed Next Level Game on 18 Nov 2022: 7 findings, 0 critical; 4 marked fixed, 3 open.

No open critical findings
Open the reportOpen Next Level Game’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium100
Low204
MediumCentralization Related RisksOpen

In the contract `TokenProcessing` the role `_owner` has authority over the functions shown below. * `takeFee()` - Transfer fees collected in the vault to a specified address. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority to extract fees from the contract. ![](https://accelerator-tasks-prod.acc.corp.certik.com/2c487a679d7340c6a6bd19ddc4d29991/diagrams/centralization_TokenProcessing-TokenProcessing-_owner.svg) In the contract `Ownable` the role `_owner` has authority over the functions shown below. * `renounceOwnership()` - Give up ownership of the contract. * `transferOwnership()` - Transfer the role `_owner` to another address. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority to transfer ownership of the contract. ![](https://accelerator-tasks-prod.acc.corp.certik.com/2c487a679d7340c6a6bd19ddc4d29991/diagrams/centralization_Ownable-Ownable-_owner.svg)

LowDiscussion of the control flowOpen

According to the code within the protocol, the Next Level Game is a platform that has 16 levels. The users can pay a fee to create and join tables in level 0 and then to the next level when the user fulfills certain conditions. For every level, the user that creates the first new table in the level will pay a fee to the platform. Subsequent users can join the created table and pay fees to the table owner, and then subsequently create their own tables which do not have links to each other. Each table will be closed after two users have joined, and then the table owner can choose to upgrade to create a new table in the next level (within one day after closing the original table) or to create a new table at the current level (after a period of one day). For each user that joins, the platform will charge a fixed percentage of the price as a fee. The original price is fixed and the price increases as the level gets higher.

LowIncompatibility With Deflationary TokensOpen

When transferring standard ERC20 deflationary tokens, the input amount may not be equal to the received amount due to the charged transaction fee. As a result, an inconsistency in the amount will occur and the transaction may fail due to the balance being insufficient. For example, in the functions`joinRefLevel()` or `join()`, the contract will call the function `depositByLevel()` to transfer the `mainToken` from `msg.sender` to `address(this)`, and then call the function `withdrawalPrizeByLevel()` to transfer the corresponding `mainToken` from `address(this)` to the owner of the table. If the `mainToken` is a deflationary token, the call of `withdrawalPrizeByLevel()` will fail when the transaction fee is greater than the fee of the protocol, or the record of the fees in the protocol will be incorrect due to lack of the mitigation mechanisms for the transaction fees.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Next Level Game’s security record

Next Level Game
Audits1 audit by 1 firmLast audit Nov 2022, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open Next Level Game’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us