Diment - (Main Contract & Proxy)

CertiK27 Mar 2024Code version: not recorded (see the report)

CertiK reviewed Diment Dollar (Diment - (Main Contract & Proxy)) on 27 Mar 2024: 5 findings, 0 critical; 2 marked fixed, 3 open.

No open critical findings

Open Diment Dollar’s security record

The original report was removed from its address (seen 20 Oct 2026).

Trustblock does not review code.

Findings5

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	3	0
Medium	0	0
Low	0	2

LowInefficient Storage Access in LoopsFixed

The current implementation frequently accesses dynamic array lengths within loop conditions, leading to redundant computation and potential gas inefficiencies. Each iteration of the loop retrieves the array's length from storage, incurring unnecessary gas costs, especially in loops executed.

LowUnprotected InitializerFixed

One or more logic contracts do not protect their initializers. An attacker can call the initializer and assume ownership of the logic contract, whereby she can perform privileged operations that trick unsuspecting users into believing that she is the owner of the upgradeable contract. ```solidity=8 contract DimentDollar is ``` - `DimentDollar` is an upgradeable contract that does not protect its initializer. ```solidity=36 function initialize( ``` - `initialize` is an unprotected initializer function.