ODOM Certificate of title - Audit

CertiK8 Sep 2022Files named in the report

CertiK reviewed ODOM CHAIN (ODOM Certificate of title - Audit) on 8 Sep 2022: 4 findings, 0 critical; all acknowledged, none fixed.

No open critical findings

Open the report Open ODOM CHAIN’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings4

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	2	0
Medium	0	0	0
Low	0	2	0

HighCentralization Related RisksAcknowledged

In the contract PauserRole.sol the role `onlyPauser` has authority over the following functions: - addPauser() - unpause() - pause() Any compromise to the `onlyPauser` account may allow a hacker to take advantage of this authority.

HighInitial Token DistributionAcknowledged

ODC tokens are sent to the contract deployer when deploying the contract. This could be a centralization risk as the deployer can distribute tokens without obtaining the consensus of the community.

LowLack of Zero Address ValidationAcknowledged

In function `_transfer`,the variable `from` should be verified as a non-zero value to prevent being mistakenly assigned as `address(0)` in the function.

LowMissing Error MessagesAcknowledged

In functions `transferFrom`, `decreaseAllowance`, `_transfer`,`_burn` and `_burnFrom`, if the value is less than the account balance, the **require** in the `sub` function will throw an exception. It is better to provide a string message containing details about the error that will be passed back to the caller.