Diment - (Main Contract & Proxy)

CertiKCode version: not recorded (see the report)

CertiK reviewed Diment Dollar (Diment - (Main Contract & Proxy)) on 27 Mar 2024: 5 findings, 0 critical; 2 marked fixed, 3 open.

No open critical findings
Open Diment Dollar’s security record

The original report was removed from its address (seen 20 Oct 2026).

Trustblock does not review code.

Findings5

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High300
Medium000
Low002
HighCentralization Related RisksOpen

In the contract `DimentDollar` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and : - add or remove any address from the blacklist; - mint any amount of token to any non-blacklisted address; - burn all tokens from a blacklisted address; ![](https://accelerator-tasks-prod.acc.corp.certik.com/11ee-d201-6fc58540-85ec-b738b65b6b0a/diagrams/centralization_DimentDollar-DimentDollar-_owner.svg)

HighCentralized Balance ManipulationOpen

In the contract `DimentDollar`, the role `onlyOwner` has the authority to update the token balance of an arbitrary account without enough sanity restriction. Any compromise to the `onlyOwner` account may allow a hacker to take advantage of this authority and manipulate users' balances by either: - minting any amount of token to any address; - burning all tokens from a specific address by adding it to the blacklist;

HighCentralized Control of Contract UpgradeOpen

The contract `DimentDollar`, is used as the implementation logic used in an upgradable contract using the EIP-1967 Transparent Proxy pattern. The `ProxyAdmin` has the authority to update the implementation contract and therefore change the logic of `DimentDollar`. Any compromise to the `ProxyAdmin` account may allow a hacker to take advantage of this authority and change the implementation contract which is pointed by proxy and therefore execute potential malicious functionality in the implementation contract.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Diment Dollar’s security record

Diment Dollar
Audits1 audit by 1 firmLast audit Mar 2024, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open Diment Dollar’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us