CertiK reviewed Rivalz Network on 24 Oct 2024: 3 findings, 0 critical; all acknowledged, none fixed.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 2 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 1 | 0 |
The `RivalzToken` contract inherits from `Ownable.sol`, the `_owner` has authority over the following functions: - `renounceOwnership`: Leaves the contract without owner. - `transferOwnership`: Transfers ownership of the contract to a new account (`newOwner`). Any compromise of the `_owner` account could allow an attacker to exploit this authority, potentially removing the current owner or transferring ownership to a malicious account.
All of the `RIZ` tokens are sent to the contract deployer. This is a centralization risk because the deployer can distribute tokens without obtaining the consensus of the community. Any compromise to the deployer's account may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project.
The compiler for Solidity 0.8.20 switches the default target EVM version to [Shanghai](https://blog.soliditylang.org/2023/05/10/solidity-0.8.20-release-announcement/#important-note), which includes the new `PUSH0` opcode. The compiler for Solidity [0.8.20+](https://github.com/ethereum/solidity/releases) did not remove the `PUSH0` opcode. This opcode may not yet be supported on all chains, leading to failed deployments. To work around this issue, use an earlier [EVM](https://docs.soliditylang.org/en/v0.8.20/using-the-compiler.html?ref=zaryabs.com#setting-the-evm-version-to-target) [version](https://book.getfoundry.sh/reference/config/solidity-compiler#evm_version).
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us