Qredo Token

Quantstamp28 May 2021Files named in the report

Audit

Quantstamp reviewed Qredo Token on 28 May 2021: 4 findings, 0 critical; 1 marked fixed, 2 acknowledged, 1 open.

No open critical findings

Open the report Open Qredo Token’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings4

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	0
Low	1	2	1

LowClone-and-OwnAcknowledged

The clone-and-own approach involves copying and adjusting open source code at one's own discretion. From the development perspective, it is initially beneficial as it reduces the amount of effort. However, from the security perspective, it involves some risks as the code may not follow the best practices, may contain a security vulnerability, or may include intentionally or unintentionally modified upstream libraries. Specifically, the `Mintable` and `Burnable` functionalities can be reused from OZ libraries.

LowPrivileged Roles and OwnershipAcknowledged

Smart contracts will often have `owner` variables to designate the person with special privileges to make modifications to the smart contract. Specifically, some accounts are authorized to mint tokens (up to a certain global limit)