Part of CertiK’s retainer series
CertiK reviewed WEMIX (Wemix Retainer 129 PlayTokenExchanger) on 9 Sep 2024: 6 findings, 0 critical; 1 marked fixed, 5 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 2 | 0 | 0 |
| Medium | 1 | 0 | 0 |
| Low | 2 | 0 | 1 |
In the `withdraw` function, an internal call to the mint function of the `playToken` contract is made to process asset withdrawals. When the mint function call fails, the error message returned is `PlayTokenExchangerByMint: burn fail`. This message is misleading as it suggests a failure in a `burn` operation, which is inconsistent with the actual `mint` function being called. ```solidity=13 (bool status,) = playToken.call(abi.encodeWithSelector(MINT_FUNC_SELECTOR, msg.sender, amount)); require(status, "PlayTokenExchangerByMint: burn fail"); ``` ```solidity=22 (bool status,) = playToken.call(abi.encodeWithSelector(MINT_FUNC_SELECTOR, msg.sender, amount)); require(status, "PlayTokenExchangerByMint: burn fail"); ```
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (8)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us