CertiK reviewed Diment Dollar (Diment - (Main Contract & Proxy)) on 27 Mar 2024: 5 findings, 0 critical; 2 marked fixed, 3 open.
The original report was removed from its address (seen 20 Oct 2026).
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 3 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 0 | 2 |
In the contract `DimentDollar` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and : - add or remove any address from the blacklist; - mint any amount of token to any non-blacklisted address; - burn all tokens from a blacklisted address; 
In the contract `DimentDollar`, the role `onlyOwner` has the authority to update the token balance of an arbitrary account without enough sanity restriction. Any compromise to the `onlyOwner` account may allow a hacker to take advantage of this authority and manipulate users' balances by either: - minting any amount of token to any address; - burning all tokens from a specific address by adding it to the blacklist;
The contract `DimentDollar`, is used as the implementation logic used in an upgradable contract using the EIP-1967 Transparent Proxy pattern. The `ProxyAdmin` has the authority to update the implementation contract and therefore change the logic of `DimentDollar`. Any compromise to the `ProxyAdmin` account may allow a hacker to take advantage of this authority and change the implementation contract which is pointed by proxy and therefore execute potential malicious functionality in the implementation contract.
The report names a repository or files. Open the report to see its scope.
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us