Farmsent security record

Polygon (POS)farmsent.io

As of 3 Nov 2026, Farmsent has 1 audit report on Trustblock, by CertiK, dated 5 May 2023. That report lists no open critical findings.

Critical findings
No open critical findings
In 1 report.
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.

Audits1

Newest first

AuditSecurity firmDateScopeCritical findingsReport
FarmsentSecurity firm: CertiKDate: Scope: Files named in the reportNo open critical findingsOpen · skynet.certik.com

Findings3

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical000
High200
Medium000
Low100
HighCentralization Risks in FarmsentERC20.solFarmsent · CertiK · 5 May 2023Open

In the contract `FARMSENT` the role `_owner` has authority over the functions shown below. ![](https://accelerator-tasks-prod.acc.corp.certik.com/2b6cbf81799c48469f9f3157ef630a61/diagrams/centralization_FarmsentERC20-FARMSENT-_owner.svg) - `addMultipleAccountToBlacklist(address[] calldata _beneficiaries)`: Adds multiple addresses to the blacklist, preventing them from making token transfers, can only be called by the contract owner. - `addMultipleAccountToWhitelist(address[] calldata _beneficiaries)`: Adds multiple addresses to the whitelist, allowing them to make token transfers when the whitelist feature is enabled, can only be called by the contract owner. - `addToBlacklist(address _beneficiary)`: Adds an address to the blacklist, preventing it from making token transfers, can only be called by the contract owner. - `addToWhitelist(address _beneficiary)`: Adds an address to the whitelist, allowing it to make token transfers when the whitelist feature is enabled, can only be called by the contract owner. - `enableOrDisableWhitelist(bool isWhitelist)`: Enables or disables the whitelist feature, can only be called by the contract owner. - `initialize(string memory name, string memory symbol, uint8 _decimal, uint256 totalSupply)`: Initializes the contract with a token name, symbol, decimal places, and initial supply, can only be called once by the contract owner. - `mint(uint256 amount)`: Mints new tokens and assigns them to the contract owner, can only be called by the contract owner. - `pause()`: Pauses the contract, stopping all token transfers, can only be called by the contract owner. - `removeFromBlacklist(address _beneficiary)`: Removes an address from the blacklist, allowing it to make token transfers again, can only be called by the contract owner. - `removeFromWhitelist(address _beneficiary)`: Removes an address from the whitelist, can only be called by the contract owner. - `unpause()`: Unpauses the contract, allowing token transfers to resume, can only be called by the contract owner. --- In the contract `FARMSENT` the role `_whitelist` has authority over the functions shown below. ![](https://accelerator-tasks-prod.acc.corp.certik.com/2b6cbf81799c48469f9f3157ef630a61/diagrams/centralization_FarmsentERC20-FARMSENT-_whitelist.svg) - `transferFrom(address from, address to, uint256 amount)`: Transfers tokens from one address to another on behalf of the token holder, can be called by a whitelisted user - `transfer(address to, uint256 amount)`: Transfers tokens from the caller's address to another address, can be called by the caller that is whitelisted if the whitelist feature is enabled, and the caller is not blacklisted. Any compromise to the privileged account may allow the hacker to take advantage of this authority.

Open the report
HighInitial Token DistributionFarmsent · CertiK · 5 May 2023Open

All **FarmsentERC20** tokens are sent to the contract deployer when deploying the contract. This is a potential centralization risk as the deployer can distribute **FarmsentERC20** tokens without the consensus of the community.

Open the report
LowUser-Defined GettersFarmsent · CertiK · 5 May 2023Open

The linked functions are equivalent to the compiler-generated getter functions for the respective variables.

Open the report

Contracts

No deployed address is recorded for these audits.

The reports name a repository or files. Open a report to see its scope.

The repositories and files the reports name

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
<div
data-tb-project-widget
data-tb-project-slug="farmsent"
></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us