As of 3 Nov 2026, fintoken.pro has 1 audit report on Trustblock, by CertiK, dated 17 Nov 2022. That report lists no open critical findings.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Fintoken Coin | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 2 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 3 | 0 | 1 |
# Minimum Balance Checks In #L90, if either the sender or recipient are exempt from the fees, there is no check to ensure that the sender's balance after the transfer is not below the minimum balance. If this is the intended behavior and privileged users are not constrained by the minimum balance, then the check in #L73 would prevent the sender from transferring more tokens until they have a sufficient balance. # Locked Tokens In #L84, the calculation of `transferTokenAmount` can lead to tokens being locked out of the transfer. For example, given the following values in a simplified example: Parameter | Value ----------|------- `MIN_BALANCE` | 100 `balanceOf(sender)` | 250 `amount` | 200 Using the fee distributions of `_transfer()`, 6 tokens will be sent as fees, leaving 194 tokens as the `transferTokenAmount`. After #L84, a new total of 100 tokens is sent, bringing the sender balance to 150 tokens. An additional 50 tokens could still be sent without bringing the sender balance below the minimum balance. As structured, as more distinct accounts are sent the `FTC` token, the amount of total `FTC` locked in users' accounts rises.
Open the reportThere should always be events emitted in the sensitive functions that are controlled by centralization roles.
Open the reportThe given inputs are missing the following checks: - In function `initSupply()`, input addresses `_presaleAddr`, `_liquidityAddr`, `_communityAddr`, `_devAddr`, and `_dexAddr` are missing a check that the same address is not used for multiple inputs. - In function `setFeeAddrs()`, input `_communityFundAddr` and `_marketAddr` are missing a check they are not the same address and that they have not been previously set to the same input. - In function `setExcludeFromFee()`, a check is missing that `_isExcludedFromFee[account]` is not already bool `enable`.
Open the reportThe reports name a repository or files. Open a report to see its scope.
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="fintoken-1"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us