CheckDot

CertiKFiles named in the report

CertiK reviewed CheckDot on 31 Aug 2023: 4 findings, 0 critical; 1 marked fixed, 1 acknowledged, 2 open.

No open critical findings
Open the reportOpen CheckDot’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings4

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High010
Medium000
Low201
LowUse of `_holdingTimes` variableFixed

In the `_transfer()` function, the `_holdingTimes` of `sender` will be set to `block.timestamp`. In the case that the `recipient` is receiving tokens when it has no token balance prior to the transfer, the `_holdingTimes` of `recipient` will also be set to `block.timestamp`. There are some concerns regarding the setting of `_holdingTimes` during transfers. For example, the initial holder transfers 200 CDT to Alice, and then Alice transfers 100 CDT to Bob and 100 CDT to Carl, finally Bob transfers 50 CDT back to Alice. It is observed that the `_holdingTimes` of Alice is updated with each of the above transactions involving Alice and the value of `_holdingTimes` is overwritten during normal transfers. In the various scenarios, like the ones described above, the value of `_holdingTimes` could be interpreted to mean different things. Therefore, we would like to understand more about the use of `_holdingTimes` and confirm if the current implementation aligns with the intended design.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (6)

  • contracts/interfaces/IERC20.sol
  • contracts/erc20/ERC20.sol
  • contracts/utils/Context.sol
  • contracts/CheckDot.sol
  • contracts/interfaces/IHoldingTime.sol
  • contracts/interfaces/IBurnable.sol

Part of CheckDot’s security record

CheckDot
Audits3 audits by 2 firmsLast audit Aug 2023, by CertiK.
Critical findingsNo open critical findingsAcross 3 reports.
Open CheckDot’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us