Valinity Formal Verification
CertiK reviewed Valinity (Valinity Formal Verification) on 15 Dec 2022: 2 findings, 0 critical; 1 marked fixed, 1 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Findings2
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 0 |
| Low | 1 | 0 | 0 |
HighNo price check when creating ExchangeCap offerFixed
In the contract MFCExchangeCap, the role `onlyBackendAgents` has authority over the function `createOffer()`. In the function `createOffer()`, according to the design document the price is supposed to be twice the floor price but this is not enforced in the contract. Any compromise to the `onlyBackendAgents` account may allow a hacker to create an offer with any price, which could potentially lead to decrease in the floor price. For the formal verification, we used an assumption that the price is set correctly.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (5)
- contracts/token/MFCToken.sol
- contracts/exchange/MFCExchangeCap.sol
- contracts/exchange/MFCExchange.sol
- contracts/exchange/ExchangeCheck.sol
- contracts/exchange/MFCExchangeFloor.sol
Part of Valinity’s security record
ValinitySecurity firm
CertiK1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us