Nordek Network

QuillAuditsFiles named in the report

Audit · firm’s term: audit report

QuillAudits reviewed NORDEK (Nordek Network) on 23 May 2023: 8 findings, 0 critical; 5 marked fixed, 3 open.

No open critical findings
Open the reportOpen NORDEK’s security record

Report hosted on quillaudits.com.

Trustblock does not review code.

Findings8

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium001
Low304
MediumThe owner is a single point of failure and a centralization riskFixed

Having a single EOA as the only owner of contracts is a large centralization risk and a single point of failure. A single private key may be taken in a hack, or the sole holder of the key may become unable to retrieve the key when necessary.

LowLocal Hardhat test  failingFixed

Many tests are getting failed on Hardhat in the local env.

LowPause and unPause functionality missingFixed

During the code review, It has been noticed that pausing and unpausing of user-centric functions are not present.

LowRemove unused functionsFixed

Remove _setSnapshot, getSnapshotsPerCycle, _setNextSnapshotId, _setLastSnapshotTakenAtBlock, _getSeed, and _getRandom in ConsensusUtil.sol as it’s been not used anywhere and return unnecessary.

LowUsed locked pragma versionFixed

The pragma versions used in the contract are not locked. Considerusing the latest versions among 0.8.19 for deploying the contracts and libraries as it does not compile for any other version and can be confusing for a developer. Solidity source files indicate the versions of the compiler they can be compiled with. pragma solidity ^0.8.0; // bad: compiles between 0.8.0 and 0.8.19 pragma solidity 0.8.0; // good: compiles w 0.8.0 only but not the latest version pragma solidity 0.8.19; // best: compiles w 0.8.19

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (50)

  • artifacts/openzeppelin-solidity/contracts/math/SafeMath.sol
  • contracts/eternal-storage/EternalStorage.sol
  • contracts/eternal-storage/EternalStorageProxy.sol
  • artifacts/contracts/interfaces/IBlockReward.sol
  • contracts/multisig-wallet/GnosisSafeProxy.sol
  • artifacts/contracts/VotingUtils.sol
  • artifacts/contracts/abstracts/VotingBase.sol
  • contracts/interfaces/IConsensus.sol
  • artifacts/contracts/eternal-storage/EternalStorage.sol
  • artifacts/contracts/interfaces/IConsensus.sol
  • contracts/abstracts/VotingBase.sol
  • artifacts/contracts/test/EternalStorageProxyMock.sol
  • artifacts/contracts/interfaces/IVoting.sol
  • artifacts/contracts/test/ProxyStorageMock.sol
  • contracts/Migrations.sol
  • artifacts/openzeppelin-solidity/contracts/math/Math.sol
  • contracts/abstracts/BlockRewardBase.sol
  • artifacts/contracts/test/ConsensusMock.sol
  • artifacts/contracts/Consensus.sol
  • contracts/interfaces/IVoting.sol
  • contracts/multisig-wallet/GnosisSafeL2.sol
  • artifacts/contracts/ConsensusUtils.sol
  • contracts/BlockReward.sol
  • artifacts/contracts/test/BlockRewardMock.sol
  • contracts/Voting.sol
  • contracts/multisig-wallet/GnosisSafe.sol
  • artifacts/contracts/eternal-storage/EternalStorageProxy.sol
  • contracts/test/BlockRewardMock.sol
  • contracts/multisig-wallet/MultiSigWallet.sol
  • artifacts/contracts/abstracts/ValidatorSet.sol
  • artifacts/contracts/Migrations.sol
  • contracts/VotingUtils.sol
  • contracts/test/EternalStorageProxyMock.sol
  • artifacts/contracts/Voting.sol
  • contracts/interfaces/IBlockReward.sol
  • contracts/ProxyStorage.sol
  • contracts/test/VotingMock.sol
  • artifacts/contracts/multisig-wallet/MultiSigWallet.sol
  • artifacts/contracts/abstracts/BlockRewardBase.sol
  • contracts/test/ConsensusMock.sol
  • contracts/multisig-wallet/OwnershipDataEncoder.sol
  • artifacts/contracts/test/VotingMock.sol
  • contracts/test/ProxyStorageMock.sol
  • contracts/Consensus.sol
  • contracts/abstracts/ValidatorSet.sol
  • contracts/ConsensusUtils.sol
  • artifacts/contracts/BlockReward.sol
  • artifacts/contracts/multisig-wallet/OwnershipDataEncoder.sol
  • artifacts/contracts/ProxyStorage.sol
  • artifacts/hardhat/console.sol

Part of NORDEK’s security record

NORDEK
Audits1 audit by 1 firmLast audit May 2023, by QuillAudits.
Critical findingsNo open critical findingsIn 1 report.
Open NORDEK’s security record

Security firm

QuillAudits

350 projects reviewed · 459 reports · latest Apr 2025

See QuillAudits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us