CertiK reviewed Voxel X Network (SuperKluster) on 19 Jul 2022: 14 findings, 1 critical; 13 marked fixed, 1 open.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 1 | 0 | 3 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 0 | 8 |
In the contract `SK721Collection` the role `marketplace` has authority over the functions shown below. Any compromise to the `marketplace` account may allow the hacker to take advantage of this authority and - mint a new token through `mintItem()` - set the token URI through `setTokenURI()` - set the marketplace address through `setMarketplaceAddress()` In the contract `SK1155Collection` the role `marketplace` has authority over the functions shown below. Any compromise to the `marketplace` account may allow the hacker to take advantage of this authority and - mint new tokens through `mintItem()` - set the token URI through `setTokenURI()` - set the marketplace address through `setMarketplaceAddress()` In the contract `VoxelxCollection` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and - transfer ownership through `transferOwnership()` - renounce ownership through `renounceOwnership()` - mint tokens in batches through `mintItems()` In the contract `SKMarketPlace` the role `timeLockController` has authority over the functions shown below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and - transfer Ownership through `transferOwnership()` - add trusted users through `addTrusted()` - remove trusted users through `removeTrusted()` - pause listing and buying tokens through `pause()` - unpause listing and buying tokens through `unpause()` - set the `vxlToken` address through `changeVxlToken()` - set the `signer` address through `setSigner()` - set the `skTeamWallet` address through `getSKTeamWallet()` - set the `serviceFee` through `getServiceFee()` - view the `signer` address through `getSigner()` - view the `serviceFee` through `getServiceFee()` - view the `skTeamWallet` through `getSKTeamWallet()` - add new collection address for sale through `addSKCollection()` - remove collection address from sale through `removeSKCollection()` - set the marketplace address for SKCollections through `setMarketAddressforNFTCollection()`\ - withdraw all remaining voxel token through `withdrawRemainingVXLToken()`
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (4)
1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us