Aderlo Metaverse

CertiKFiles named in the report

CertiK reviewed Aderlo Metaverse on 2 Feb 2023: 14 findings, 0 critical; 10 marked fixed, 4 acknowledged.

No open critical findings
Open the reportOpen Aderlo Metaverse’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings14

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High012
Medium000
Low038
HighCentralization RisksAcknowledged

In the contract `AderloCashbackCoin` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and pause or unpause the contract or mint new ACC supply to addresses he owns or controls. ![](https://accelerator-tasks-prod.acc.corp.certik.com/bc0374c1dd474e4ea3b04fd90cf5f2ba/diagrams/centralization_ACC-AderloCashbackCoin-_owner.svg) --- In the contract `ACCTokenSale` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and call `sendOutsidePurchase()`, withdraw funds from this contract to malicious addresses he owns or controls and change the value of `tokensPerETH`. ![](https://accelerator-tasks-prod.acc.corp.certik.com/e8b3f514a8864e3695846e51f7dfd367/diagrams/centralization_ACCTokenSale-ACCTokenSale-_owner.svg) --- In the contract `AderloNFT` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and mint new tokens or call the `burn()` function. ![](https://accelerator-tasks-prod.acc.corp.certik.com/bc0374c1dd474e4ea3b04fd90cf5f2ba/diagrams/centralization_AderloNFT-AderloNFT-_owner.svg)

LowUnlocked Compiler VersionAcknowledged

The contract has unlocked compiler version. An unlocked compiler version in the source code of the contract permits the user to compile it at or above a particular version. This, in turn, leads to differences in the generated bytecode between compilations due to differing compiler version numbers. This can lead to an ambiguity when debugging as compiler specific bugs may occur in the codebase that would be hard to identify over a span of multiple compiler versions rather than a specific one.

LowUnused VariableAcknowledged

`numberOfWithdrawals` is declared and initialized to zero but never used.

LowUse `_msgSender()`Acknowledged

`msg.sender` is used instead of `_msgSender()` from `ContextUpgradeable`.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (4)

  • VestingWallet.sol
  • AderloNFT.sol
  • ACC.sol
  • ACCTokenSale.sol

Part of Aderlo Metaverse’s security record

Aderlo Metaverse
Audits1 audit by 1 firmLast audit Feb 2023, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open Aderlo Metaverse’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us