CertiK reviewed BNB Chain (BNB Chain - BGBP (refreshed)) on 3 Feb 2023: 8 findings, 0 critical; 1 acknowledged, 7 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 7 | 0 | 0 |
The change of the contract's owner overrides the previously set owner with the new one without guaranteeing the new owner is able to actuate transactions on-chain.
The linked statements do not affect the functionality of the codebase and appear to be either leftovers from test code or older functionality.
A local variable is shadowing another component defined elsewhere. ```solidity=769 function allowance(address _owner, address _spender) public view returns (uint256 remaining) { ``` - Local variable `_owner` in `BGBPToken.allowance()` shadows the variable `_owner` in `Ownable`.
Solidity frequently releases new compiler versions. Using an old version prevents access to new Solidity security features. We also recommend avoiding complex `pragma` statements. The pragma statement in use allows old versions: ```solidity=1 pragma solidity 0.5.8; ```
There are some typos in the comments.
The linked functions are equivalent to the compiler-generated getter functions for the respective variables.
The linked variables assigned in the constructor can be declared as `immutable`. Immutable state variables can be assigned during contract creation but will remain constant throughout the lifetime of a deployed contract. A big advantage of immutable variables is that reading them is significantly cheaper than reading from regular state variables since they will not be stored in storage.
| Address | Chain | Source code |
|---|---|---|
| 0xc9a2…12ec0xc9a2c4868f0f96faaa739b59934dc9cb304112ec | Chain: Ethereum | Source code: Verified source |
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us