Audit · firm’s term: audit report
QuillAudits reviewed NORDEK (Nordek Network) on 23 May 2023: 8 findings, 0 critical; 5 marked fixed, 3 open.
Report hosted on quillaudits.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 3 | 0 | 4 |
Having a single EOA as the only owner of contracts is a large centralization risk and a single point of failure. A single private key may be taken in a hack, or the sole holder of the key may become unable to retrieve the key when necessary.
Many tests are getting failed on Hardhat in the local env.
During the code review, It has been noticed that pausing and unpausing of user-centric functions are not present.
Remove _setSnapshot, getSnapshotsPerCycle, _setNextSnapshotId, _setLastSnapshotTakenAtBlock, _getSeed, and _getRandom in ConsensusUtil.sol as it’s been not used anywhere and return unnecessary.
The pragma versions used in the contract are not locked. Considerusing the latest versions among 0.8.19 for deploying the contracts and libraries as it does not compile for any other version and can be confusing for a developer. Solidity source files indicate the versions of the compiler they can be compiled with. pragma solidity ^0.8.0; // bad: compiles between 0.8.0 and 0.8.19 pragma solidity 0.8.0; // good: compiles w 0.8.0 only but not the latest version pragma solidity 0.8.19; // best: compiles w 0.8.19
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (50)
350 projects reviewed · 459 reports · latest Apr 2025
See QuillAudits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us