CertiK reviewed Elixir Games on 29 May 2024: 2 findings, 0 critical; all acknowledged, none fixed.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 2 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 0 | 0 |
According to the on-chain data, the following authority involved with Elixir Games token: Based on the on-chain analysis: - Freeze authority has been assigned to the [A6qS9pVBwaDDA9vKAGAKBW3x49GMrgWD5gQ1T3QaGXnP](https://explorer.solana.com/address/A6qS9pVBwaDDA9vKAGAKBW3x49GMrgWD5gQ1T3QaGXnP). - The metadata update authority for the Elixir Games Token is centralized to a single account [A6qS9pVBwaDDA9vKAGAKBW3x49GMrgWD5gQ1T3QaGXnP](https://explorer.solana.com/address/A6qS9pVBwaDDA9vKAGAKBW3x49GMrgWD5gQ1T3QaGXnP). Any compromise of the aforementioned accounts or authorities could allow an attacker to freeze any number of tokens during circulation, thereby disrupting normal market trading. Additionally, if the metadata update authority is compromised, attackers could maliciously manipulate the contract metadata, which could mislead users and platforms, disrupting ecosystem operations based on incorrect token information.
All of the Elixir Games tokens are initially sent to the specified address. This could be a centralization risk as the anonymous address can distribute tokens without obtaining the consensus of the community. Any compromise to this account that holds undistributed tokens may allow the attacker to steal and sell tokens on the market, resulting in severe damage to the project. Based on the on-chain analysis, the initially minted 1,500,000,000,000,000,000 (9 decimals) Elixir Games token has been transferred to the token account [8GhfXhegw9B4UpfJCRWJrwwmqhEFV1VZngFSLU6wMDW2](https://explorer.solana.com/address/8GhfXhegw9B4UpfJCRWJrwwmqhEFV1VZngFSLU6wMDW2)(owner: [A6qS9pVBwaDDA9vKAGAKBW3x49GMrgWD5gQ1T3QaGXnP](https://explorer.solana.com/address/A6qS9pVBwaDDA9vKAGAKBW3x49GMrgWD5gQ1T3QaGXnP)) in the transaction [4FJ2v2qYAZCNcBDSs3hdnA7MU7hGWxnJVa3RrN8kmVh2VqTViHJtnfFJo587SpjH2pKEuG3Pto99YdJsqeW9icDc](https://explorer.solana.com/tx/4FJ2v2qYAZCNcBDSs3hdnA7MU7hGWxnJVa3RrN8kmVh2VqTViHJtnfFJo587SpjH2pKEuG3Pto99YdJsqeW9icDc). As of 05/28, the tokens has been distributed to multiple addresses and the detailed holder list can be found on the [solscan](https://solscan.io/token/5cbq1HriesW4zHpFEk9Gc8UT4ccmfHcBTDCa2XcBduTo#holders), according to this data, it is found that the proportion of tokens held by a single account is as high as 99%.
The report names a repository or files. Open the report to see its scope.
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us