dloop Art Registry Smart Contract security record
As of 3 Nov 2026, dloop Art Registry Smart Contract has 1 audit report on Trustblock, by Quantstamp, dated 26 May 2020. That report lists no open critical findings.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| dloop Art Registry Smart Contract | Security firm: Quantstamp | Date: | Scope: Files named in the report | No open critical findings | Open · certificate.quantstamp.com |
Findings8
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 3 | 4 |
LowBlock Timestamp Manipulationdloop Art Registry Smart Contract · Quantstamp · 26 May 2020Acknowledged
Projects may rely on block timestamps for various purposes. However, it's important to realize that miners individually set the timestamp of a block, and attackers may be able to manipulate timestamps for their own purposes. If a smart contract relies on a timestamp, it must take this into account. The logic on `L82` (in `canWithdrawNow()`) can be manipulated by miners, and timestamp precision should not be assumed to be higher than 15 seconds. For example, even for the stated default value of `300` seconds, the actual wait time could potentially vary between, roughly, `275` and `315` seconds. The smaller the value of withdrawal wait time is, the less reliable it gets: e.g., setting it to `15` seconds (or anything comparable to block duration) could lead to unpredictable behaviour.
Open the reportLowCentralization of Powerdloop Art Registry Smart Contract · Quantstamp · 26 May 2020Acknowledged
Smart contracts often have special roles to designate entities with privileges to make modifications to smart contracts. In the context of this project, minter roles assume privileged access such as, ability to add or modify artwork, transfer, or withdraw tokens on behalf of other users. Minters and admins need to be trusted by ordinary users. If privileged members lose their private keys, regular users could suffer from losses or unexpected behavior.
Open the reportLowInability to remove or fix incorrect artwork itemsdloop Art Registry Smart Contract · Quantstamp · 26 May 2020Acknowledged
The following scenarios could happen in production: 1. A trusted minter makes a mistake and publishes artwork with valid, but incorrect data. For example, a hash could be computed incorrectly, or the same data being added multiple times. 2. A minter's account is compromised, which leads to fake or unintentional artwork published in the smart contract. In both of these cases, it is currently impossible to recover: there is no option to correct or delete an artwork.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="dloop-art-registry-smart-contract"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us