Melody

CertiK24 Oct 20221 address on BNB Chain

Audit

CertiK reviewed Melody on 24 Oct 2022: 2 findings, 0 critical; all acknowledged, none fixed.

No open critical findings

Open the report Open Melody’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings2

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	1	0
Medium	0	1	0
Low	0	0	0

HighCentralization Related RisksAcknowledged

In the contracts `SGS`, the role `MINTER_ROLE` has authority over the following function: - function `ERC20PresetMinterPauser.mint()`, to mint unlimited tokens for any account. Any compromise to the `MINTER_ROLE` account may allow a hacker to take advantage of this authority. In the contracts `SGS`, the role `PAUSER_ROLE` has authority over the following function: - function `ERC20PresetMinterPauser.pause()`, to pause the token transfer. Any compromise to the `PAUSER_ROLE` account may allow a hacker to take advantage of this authority. In the contracts `SGS`, the role `DEFAULT_ADMIN_ROLE` has authority over the following functions: - functions `AccessControl.grantRole()` and `AccessControl.revokeRole()`, to manage roles. Any compromise to the `DEFAULT_ADMIN_ROLE` account may allow a hacker to take advantage of this authority.

MediumInitial Token DistributionAcknowledged

All of the tokens are sent to the contract deployer when deploying the contract. This could be a centralization risk as the deployer can distribute tokens without obtaining the consensus of the community.