SuperKluster

CertiKFiles named in the report

CertiK reviewed Voxel X Network (SuperKluster) on 19 Jul 2022: 14 findings, 1 critical; 13 marked fixed, 1 open.

1 critical finding, fixed
Open the reportOpen Voxel X Network’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings14

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High103
Medium001
Low008
HighCentralization Related RisksOpen

In the contract `SK721Collection` the role `marketplace` has authority over the functions shown below. Any compromise to the `marketplace` account may allow the hacker to take advantage of this authority and - mint a new token through `mintItem()` - set the token URI through `setTokenURI()` - set the marketplace address through `setMarketplaceAddress()` In the contract `SK1155Collection` the role `marketplace` has authority over the functions shown below. Any compromise to the `marketplace` account may allow the hacker to take advantage of this authority and - mint new tokens through `mintItem()` - set the token URI through `setTokenURI()` - set the marketplace address through `setMarketplaceAddress()` In the contract `VoxelxCollection` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and - transfer ownership through `transferOwnership()` - renounce ownership through `renounceOwnership()` - mint tokens in batches through `mintItems()` In the contract `SKMarketPlace` the role `timeLockController` has authority over the functions shown below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and - transfer Ownership through `transferOwnership()` - add trusted users through `addTrusted()` - remove trusted users through `removeTrusted()` - pause listing and buying tokens through `pause()` - unpause listing and buying tokens through `unpause()` - set the `vxlToken` address through `changeVxlToken()` - set the `signer` address through `setSigner()` - set the `skTeamWallet` address through `getSKTeamWallet()` - set the `serviceFee` through `getServiceFee()` - view the `signer` address through `getSigner()` - view the `serviceFee` through `getServiceFee()` - view the `skTeamWallet` through `getSKTeamWallet()` - add new collection address for sale through `addSKCollection()` - remove collection address from sale through `removeSKCollection()` - set the marketplace address for SKCollections through `setMarketAddressforNFTCollection()`\ - withdraw all remaining voxel token through `withdrawRemainingVXLToken()`

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (4)

  • contracts/SKMarketPlace.sol
  • contracts/SK1155Collection.sol
  • contracts/VoxelxCollection.sol
  • contracts/SK721Collection.sol

Part of Voxel X Network’s security record

Voxel X Network
Audits1 audit by 1 firmLast audit Jul 2022, by CertiK.
Critical findingsNo open critical findingsIn that report, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open Voxel X Network’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us