Mayors

CertiKFiles named in the report

Audit

CertiK reviewed Mayors on 28 Jun 2022: 18 findings, 0 critical; 7 marked fixed, 5 acknowledged, 6 open.

No open critical findings
Open the reportOpen Mayors’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings18

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High052
Medium001
Low604
HighIncorrect LoopFixed

The loop only goes through `number-1` loop in the current implementation, leaving the last one unset.

HighPotential Sandwich ManipulationFixed

An opportunistic seller may observe `buyItem()` transactions and set the price higher before purchasing transaction is completed by expending extra gas.

Medium`item.addr` Not VerifiedFixed

The input `item.addr` is not checked to be the designated trading NFT. A malicious user may use another contract to pass the owner check and remove items from sale.

Low`_unlockTimestamp` Not DeletedFixed

When a lootbox nft is revealed, its `_seasonURI` is deleted while the `_unlockTimestamp` is left alone.

LowLack of input validationFixed

`season.lootboxesPerAddress` is missing the input validation to be nonzero.

LowOwner and `levelUpgradesAddress`Fixed

The `updateLevel` method requires the message sender to be both the owner and `levelUpgradesAddress`.

LowUnused Output ArgumentFixed

The linked output argument is not used as return value and seems redundant.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (38)

  • contracts/lootbox/common/LootboxStructs.sol
  • contracts/marketplace/interfaces/IMarketplaceEvents.sol
  • contracts/marketplace/common/MarketplaceConstants.sol
  • contracts/common/interfaces/IERC20Metadata.sol
  • contracts/common/interfaces/IERC721.sol
  • contracts/common/erc721/ERC721Storage.sol
  • contracts/marketplace/common/MarketplaceStorage.sol
  • contracts/common/interfaces/IERC721Mintable.sol
  • contracts/marketplace/Marketplace.sol
  • contracts/lootbox/interfaces/ILootboxEvents.sol
  • contracts/common/interfaces/IERC721Receiver.sol
  • contracts/common/interfaces/IERC20Mintable.sol
  • contracts/marketplace/MarketplaceConfiguration.sol
  • contracts/lootbox/LootboxLifecycle.sol
  • contracts/marketplace/common/MarketplaceErrors.sol
  • contracts/lootbox/interfaces/ILootbox.sol
  • contracts/common/interfaces/IERC721Metadata.sol
  • contracts/common/interfaces/IERC721Burnable.sol
  • contracts/common/interfaces/IERC721Events.sol
  • contracts/lootbox/interfaces/ILootboxConfiguration.sol
  • contracts/lootbox/Lootbox.sol
  • contracts/marketplace/common/MarketplaceStructs.sol
  • contracts/marketplace/interfaces/IMarketplace.sol
  • contracts/common/interfaces/IERC20Burnable.sol
  • contracts/marketplace/MarketplaceSecondary.sol
  • contracts/lootbox/interfaces/ILootboxLifecycle.sol
  • contracts/lootbox/common/LootboxErrors.sol
  • contracts/lootbox/LootboxConfiguration.sol
  • contracts/lootbox/common/LootboxStorage.sol
  • contracts/marketplace/interfaces/IMarketplacePrimary.sol
  • contracts/common/erc721/ERC721.sol
  • contracts/common/interfaces/IERC165.sol
  • contracts/common/interfaces/IERC721Enumerable.sol
  • contracts/common/interfaces/IERC20.sol
  • contracts/lootbox/LootboxERC721.sol
  • contracts/marketplace/interfaces/IMarketplaceConfiguration.sol
  • contracts/marketplace/MarketplacePrimary.sol
  • contracts/marketplace/interfaces/IMarketplaceSecondary.sol

Part of Mayors’s security record

Mayors
Audits1 audit by 1 firmLast audit Jun 2022, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open Mayors’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us