Entropy - Audit

CertiK3 addresses on Ethereum and BNB Chain

CertiK reviewed Entropy (Entropy - Audit) on 28 Aug 2023: 2 findings, 0 critical; all acknowledged, none fixed.

No open critical findings
Open the reportOpen Entropy’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings2

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High020
Medium000
Low000
HighCentralization Related RisksAcknowledged

In the contract `EntropyErc20` the role `BRIDGE_ROLE` has authority over the functions shown in the diagram below. Any compromise to the `BRIDGE_ROLE` account may allow the hacker to take advantage of this authority and mint tokens, burn their tokens, and burn tokens from allowances. ![](https://accelerator-tasks-prod.acc.corp.certik.com/11ee-41c5-a5b1f4d0-bcd2-31748d23e19a/diagrams/centralization_EntropyErc20-EntropyErc20-BRIDGE_ROLE.svg) --- In the contract `EntropyErc20` the role `DEFAULT_ADMIN_ROLE` has authority over the function shown in the diagram below. Any compromise to the `DEFAULT_ADMIN_ROLE` account may allow the hacker to take advantage of this authority and set the `BRIDGE_ROLE`. ![](https://accelerator-tasks-prod.acc.corp.certik.com/11ee-41c5-a5b1f4d0-bcd2-31748d23e19a/diagrams/centralization_EntropyErc20-EntropyErc20-DEFAULT_ADMIN_ROLE.svg) --- In the contract `AccessControl` the role `adminRole` has authority over the following functions: - grantRole() - revokeRole() Any compromise to the `adminRole` account may allow the hacker to take advantage of this authority and grant associated role to any account or revoke the role from any account. Note that `DEFAULT_ADMIN_ROLE` is the admin role for all roles. ----------- In the contract `AccessControl` the role `role` has authority over the following function: - renounceRole() Any compromise to the `role` account may allow the hacker to take advantage of this authority and renounce corresponding privileges to functions within other contracts.

HighMinting Centralization RiskAcknowledged

In the contract `EntropyErc20`, the role `BRIDGE_ROLE` has the authority to mint an arbitrary amount of tokens to an arbitrary address. Any compromise to the `BRIDGE_ROLE` account may allow a hacker to take advantage of this authority and mint a huge amount of tokens to themselves. The hacker could sell those tokens and cause the token price to drop.

Contracts in scope3

AddressChainSource code
0x648b2e6537f1d280423566e3b7b1998ea9cd47acChain: EthereumSource code: Verified source
0x648b2e6537f1d280423566e3b7b1998ea9cd47acChain: BNB ChainSource code: Verified source
0x675ababd3a210566a5e213547523b740be80041aChain: EthereumSource code: Verified source

Part of Entropy’s security record

Entropy
Audits1 audit by 1 firmLast audit Aug 2023, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open Entropy’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us