CertiK reviewed Hooked Protocol (Hooked.io - HookToken) on 23 Nov 2022: 1 finding, 0 critical; it is not marked fixed.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 0 | 0 |
### Owner or privilege roles In the contract `HookToken` the role `_owner` has authority over the "mint" functions. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and mint a large amount of tokens to any address. ### Initial token distribution All of the "Hook" tokens are sent to the `_receiver` when deploying the contract. This could be a centralization risk as the anonymous `_receiver` can distribute tokens without obtaining the consensus of the community. Any compromise to the `_receiver` account that holds undistributed tokens may allow the attacker to steal and sell tokens on the market, resulting in severe damage to the project.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us