CertiK reviewed KOLNET on 14 Jul 2022: 10 findings, 1 critical; 3 marked fixed, 2 acknowledged, 5 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 1 | 0 |
| High | 0 | 1 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 5 | 0 | 2 |
Besides `BLACKLIST_MANAGER_ROLE` and `DEFAULT_ADMIN_ROLE`, the account that is also `BLACKLISTED_ROLE` can be assigned the given role.
The given input is missing the check for the non-zero address and invalid value.
The state variables `recoveryAdminCanditate` and `recoveryAdminKeyHash` should be reset after the recovery admin candidate becomes the actual recovery admin. In this case, the meaningless operation, unlimited `acceptRecoveryAdminOwnership()` function calls by recovery admin candidate, can be avoided.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (4)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us