Game Build - Audit

CertiKFiles named in the report

CertiK reviewed GameBuild (Game Build - Audit) on 19 Apr 2024: 8 findings, 0 critical; 6 acknowledged, 2 open.

No open critical findings
Open the reportOpen GameBuild’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings8

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High020
Medium200
Low040
MediumPausing Centralization RiskOpen

In the contract `GameBuild` and `GameBuildSwap`, the role `_owner` has the authority to update the status of the `whenNotPaused` function and further pause/resume the functionalities of this project. Any compromise to the privileged roles may allow hackers to take advantage of this authority and disable the users' actions.

MediumUnrestricted Token Swap Timing in GameBuildSwap COpen

The GameBuildSwap smart contract facilitates the swapping of two types of tokens (`tokenCRE` and `tokenSLG`) for another token (`tokenGameBuild`) based on predefined ratios. This contract is designed to allow users to convert their CRE and SLG tokens into GameBuild tokens, potentially during a migration phase or as a part of a game ecosystem's economic rebalancing. The issue in the contract's design is the absence of any restrictions or conditions on the timing of swaps. Specifically, the functions `swapCRE` and `swapSLG` lack mechanisms to prevent swaps after a certain event, such as the end of a migration period, other than the total available balance of `tokenGameBuild` in the contract. This oversight could lead to exploitation, especially if the market value of `tokenGameBuild` increases significantly compared to `tokenCRE` and `tokenSLG`. Users could potentially swap their CRE and SLG tokens for GameBuild tokens at a rate much more favorable than current market rates in the contract, leading to a sudden influx of GameBuild tokens in the market and potential devaluation.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (2)

  • contracts/GameBuild.sol
  • contracts/GameBuildSwap.sol

Part of GameBuild’s security record

GameBuild
Audits1 audit by 1 firmLast audit Apr 2024, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open GameBuild’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us