CertiK reviewed KOLNET on 14 Jul 2022: 10 findings, 1 critical; 3 marked fixed, 2 acknowledged, 5 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 1 | 0 |
| High | 0 | 1 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 5 | 0 | 2 |
Before the transaction fee is charged from the `sender`, the transaction amount has already been transferred from the `sender` to the `receiver`. So the `sender` transfers two parts, transaction amount and transaction fee. Is it line with the original design logic?
Function `initialize()` can be called by any external users. Since these function affect some critical parameters in the contract, missing access restriction here may cause incorrect contract initialization.
The contract has unlocked compiler version. An unlocked compiler version in the source code of the contract permits the user to compile it at or above a particular version. This, in turn, leads to differences in the generated bytecode between compilations due to differing compiler version numbers. This can lead to an ambiguity when debugging as compiler specific bugs may occur in the codebase that would be hard to identify over a span of multiple compiler versions rather than a specific one.
The largest transaction fee can be 100%.
The linked functions are equivalent to the compiler-generated getter functions for the respective variables.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (4)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us