Tezoro - Audit
CertiK reviewed Tezoro (Tezoro - Audit) on 14 Jul 2023: 6 findings, 0 critical; 3 marked fixed, 1 acknowledged, 2 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Findings6
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 2 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 1 | 3 |
HighCentralization Risks in TezoroService.solOpen
In the contract `Ownable` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and transfer/renounce the ownership.  In the contract `TezoroService` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority change creator address and fee amount.  In the contract `Withdrawable` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority withdraw tokens from the contract. 
HighThe creator address could change the state withouOpen
`_creatorAddress` have the ability to change the state, even if the creator is not the owner of the service.
Contracts in scope1
| Address | Chain | Source code |
|---|---|---|
| 0xfac6d13632bee2b0dab04f959c58d69a92a3b174 | Chain: Ethereum | Source code: Verified source |
Part of Tezoro’s security record
TezoroSecurity firm
CertiK1,044 projects reviewed · 1,393 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us