As of 3 Nov 2026, a KID called BEAST has 1 audit report on Trustblock, by CertiK, dated 26 Jan 2023. That report lists no open critical findings. It also holds 1 deployed contract on 1 chain.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| A Kid Called Beast | Security firm: CertiK | Date: | Scope: 1 address on Ethereum | No open critical findings | Open · skynet.certik.com |
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 1 | 0 | 0 |
| Low | 0 | 3 | 1 |
The function `mintNFT()` is designed to mint NFTs of the project `AKCB`, using 2 parameters `_typeB` & `_typeG`.\ These two variables stand for the sex of the NFT (`_typeG` will be *female* and `_typeB` will be *male*). \ By the design of the function `mintNFT()` the user can choose the sex of the NFT that will be minted. However, due to a weak randomness issue in the function `mintNFT()`, a user can precompute a perfect timing to mint the sex of the desired NFT. In this case, females are rarer than males (in terms of quantity), a user can abuse this to only get female tokens. The vulnerability occurs because the project relies on the `block.timestamp`, `block.difficulty` for creating randomness. ```solidity=1376 //pseudo randomness selection between Male/Female _typeG = uint256(keccak256(abi.encodePacked(block.difficulty, block.timestamp, totalSupply()))) % 2; ``` Because the `block.timestamp` and the `block.difficulty` are publicly known a malicious actor can precompute the result before minting. The concern is if the team decides only to use randomness to generate sex, it could lead to potential manipulation.
Open the report| Address | Chain | Source code |
|---|---|---|
| 0x7737…64a40x77372a4cc66063575b05b44481f059be356964a4 | Chain: Ethereum | Source code: Verified source |
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="a-kid-called-beast"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us