CertiK reviewed MetaCredit on 28 Dec 2022: 6 findings, 0 critical; none marked fixed.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 5 | 0 | 0 |
All **MC** tokens are sent to the following addresses when deploying the contract: * [0x67a98cc897396e6f51cac5e875f144151598af47: teamAddress_](https://polygonscan.com/address/0x67a98cc897396e6f51cac5e875f144151598af47) * [0x30895f7bacb90e4c421bc8b269e50b37fc00f8c0: foundationAddress_](https://polygonscan.com/address/0x30895f7bacb90e4c421bc8b269e50b37fc00f8c0) * [0xe928340806524e5055d0b73ff52d470acdee2392: ecoAddress_](https://polygonscan.com/address/0xe928340806524e5055d0b73ff52d470acdee2392) * [0xbbdd0e06578259316f1e4fd00aa4f5db7294c632: mineAddress_](https://polygonscan.com/address/0xbbdd0e06578259316f1e4fd00aa4f5db7294c632) This is a potential centralization risk as the aforementioned addresses can distribute **MC** tokens without the consensus of the community. Additionally, these addresses are unknown EOAs, therefore their ownership is uncertain.
State variables that never change should be declared as `constant` to save gas. ```solidity=597 address mintAdderss; ``` - `mintAdderss` should be declared `constant`.
The address variable `mintAdderss` is misspelled and should be changed to `mintAddress`.
The `SafeMath` library is used unnecessarily. With Solidity compiler versions 0.8.0 or newer, arithmetic operations will automatically revert in case of integer overflow or underflow. ```solidity=4 library SafeMath { ``` - An implementation of `SafeMath` library is found. --- ```solidity=596 using SafeMath for uint256; ``` - `SafeMath` library is used for `uint256` type in `MC` contract.
```solidity=596 using SafeMath for uint256; ``` - The library `SafeMath` is declared on a using-for directive in `MC`, but its functionalities are never used.
One or more state variables are never used in the codebase. Variable `mintAdderss` in `MC` is never used. ```solidity=597 address mintAdderss; ```
| Address | Chain | Source code |
|---|---|---|
| 0x7f72…2ef90x7f72b0ab913c169966f827e31b52c62ecac32ef9 | Chain: Polygon (POS) | Source code: Verified source |
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us