CertiK reviewed Entropy (Entropy - Audit) on 28 Aug 2023: 2 findings, 0 critical; all acknowledged, none fixed.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 2 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 0 | 0 |
In the contract `EntropyErc20` the role `BRIDGE_ROLE` has authority over the functions shown in the diagram below. Any compromise to the `BRIDGE_ROLE` account may allow the hacker to take advantage of this authority and mint tokens, burn their tokens, and burn tokens from allowances.  --- In the contract `EntropyErc20` the role `DEFAULT_ADMIN_ROLE` has authority over the function shown in the diagram below. Any compromise to the `DEFAULT_ADMIN_ROLE` account may allow the hacker to take advantage of this authority and set the `BRIDGE_ROLE`.  --- In the contract `AccessControl` the role `adminRole` has authority over the following functions: - grantRole() - revokeRole() Any compromise to the `adminRole` account may allow the hacker to take advantage of this authority and grant associated role to any account or revoke the role from any account. Note that `DEFAULT_ADMIN_ROLE` is the admin role for all roles. ----------- In the contract `AccessControl` the role `role` has authority over the following function: - renounceRole() Any compromise to the `role` account may allow the hacker to take advantage of this authority and renounce corresponding privileges to functions within other contracts.
In the contract `EntropyErc20`, the role `BRIDGE_ROLE` has the authority to mint an arbitrary amount of tokens to an arbitrary address. Any compromise to the `BRIDGE_ROLE` account may allow a hacker to take advantage of this authority and mint a huge amount of tokens to themselves. The hacker could sell those tokens and cause the token price to drop.
| Address | Chain | Source code |
|---|---|---|
| 0x648b…47ac0x648b2e6537f1d280423566e3b7b1998ea9cd47ac | Chain: Ethereum | Source code: Verified source |
| 0x648b…47ac0x648b2e6537f1d280423566e3b7b1998ea9cd47ac | Chain: BNB Chain | Source code: Verified source |
| 0x675a…041a0x675ababd3a210566a5e213547523b740be80041a | Chain: Ethereum | Source code: Verified source |
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us