CertiK reviewed Glory Finance on 23 Feb 2023: 21 findings, 3 critical; 18 marked fixed, 1 acknowledged, 2 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 3 |
| High | 0 | 1 | 1 |
| Medium | 0 | 0 | 0 |
| Low | 2 | 0 | 14 |
In the contract `GloryToken`, the role `OPERATOR_ROLE` has authority over the following functions: - `mintPublic()`; - `pause()`; - `unpause()`; - `removeDexAddress()`; - `addDexAddress()`; - `setReceiveFeeAddress()`. Any compromise to the `OPERATOR_ROLE` may allow a hacker to take advantage of this authority and : - mint any amount of tokens less than the `MAX_SUPPLY_PUBLIC` to any address they own, to then potentially sell for a profit; - add or remove addresses as dexes, when added as a dex they are charged a 1% fee on any transfer; - pause or unpause the protocol; - set the `receiverFeeAddress` to an address they own and collect any of the buy/sell fees. --- In the contract `GloryToken`, a user that has the role `OPERATOR_TEAM` has authority over the following function: - `mintToTeam()`. Any compromise to the `OPERATOR_TEAM` role may allow a hacker to take advantage of this authority and: - mint 10% of the `MAX_SUPPLY` to any address they own after the `TIME_MINT_TO_TEAM`, to then potentially sell for a profit. --- In the contract `GloryToken`, a user that has the `DEFAULT_ADMIN_ROLE` has authority over the following functions: - `grantRole()`; - `revokeRole()`. Any compromise to the `DEFAULT_ADMIN_ROLE` may allow a hacker to take advantage of this authority and: - grant any account the `OPERATOR_ROLE` and/or `OPERATOR_TEAM` role to take advantage of the authority in the ways outlined above; - revoke any accounts `OPERATOR_ROLE` and/or `OPERATOR_TEAM` role to prevent them from using the authority outlined above.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us