CertiK reviewed RisingCoin (RISC(RisingCoin)) on 21 Nov 2022: 24 findings, 0 critical; 1 marked fixed, 2 acknowledged, 21 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 2 | 1 |
| Medium | 0 | 0 | 0 |
| Low | 21 | 0 | 0 |
In the contract `RisingCoin` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and do any of the following: - exempt addresses he/she controls from fees - set taxes to values which could disrupt contract functionality - toggle boolean variables which control whether or not taxes are applicable - set the value of `_walletMax` to a value which could disrupt contract functionality - change the `marketingWalletAddress` and `teamWalletAddress` to addresses he/she controls, which receive ETH - set `minimumTokensBeforeSwap` to a value which could disrupt contract functionality - change the `uniswapV2Router` address to a malicious/incompatible contract address which would prevent this contract from working properly - perform any of the actions mentioned above and then renounce ownership, which could potentially render the contract useless Additionally, the `addLiquidity` function calls the `uniswapV2Router.addLiquidityETH` function with the `to` address specified as `owner` for acquiring the generated LP tokens from the pair. As a result, over time the `owner` address will accumulate a significant portion of LP tokens.  
| Address | Chain | Source code |
|---|---|---|
| 0x932d…d26a0x932d73dccdb2a6b4f06fd8436f29e42cae33d26a | Chain: BNB Chain | Source code: Verified source |
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us