CertiK reviewed XHYPE on 30 Jun 2023: 13 findings, 0 critical; 8 marked fixed, 2 acknowledged, 3 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 2 | 2 |
| Medium | 0 | 0 | 0 |
| Low | 3 | 0 | 6 |
In the contract `Ownable` the role `_owner` has authority over the functions shown below.  Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and: - function `renounceOwnership()`, to set the ownership to zero address. - function `transferOwnership()`, to transfer the ownership. In the contract `XHYPE` the role `_owner` has authority over the functions shown below.  Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and: - function `updateUniswapV2Router()`, to set the `uniswapV2Router` and `uniswapV2Pair`. - function `setMinBalanceForDividends()`, to set the `minBalanceForDividends`, only the users who have at least `minBalanceForDividends` amount of balance can get rewards. - function `setStartVestingDate()`, to set the `startVestingDate`. - function `setTransferPercentageAllowed()`, to set the `transferPercentageAllowed`. - function `startNukingTheWhales()`, to set the `nukeTheWhales`. - function `excludeFromFees()`, to include or exclude accounts from fees. - function `updateBuyFee()`, to set the `buyFee`. - function `updateSellFees()`, to set the `sellFee`. - function `toggleSwapEnabled()`, to set the `swapEnabled`. - function `setSwapTokensAtAmount()`, to set the `swapTokensAtAmount`. - function `setVestedWallet()`, to lock accounts for six months and add them to a vesting plan such as 3/12/24 months vesting time. - function `includeInDividends()`,`excludeFromDividends()`, to include or exclude accounts from dividends. - function `withdrawBalance()`, to withdraw all ETH in the contract to the owner. - function `claimStuckTokens()`, to withdraw all stuck tokens in the contract to the owner. - function `setExcludeFromNukeTheWhales()`, to exonerate the "nukeTheWales" process.
All of the **XHP** tokens are sent to the contract owner address. This is a centralization risk because the owner can distribute tokens without obtaining the consensus of the community. Any compromise to these addresses may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us