Iskra security record
As of 3 Nov 2026, Iskra has 4 audit reports by 1 security firm on Trustblock; the latest is by CertiK, dated 22 Apr 2024. Those reports list no open critical findings.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Audits4
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Iskra - Audit 5 | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Iskra - ItemNFTSnapshot | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Iskra - Launchpad | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| Iskra - Audit for Token (Part 1) | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
Findings45
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 8 | 2 | 0 |
| Medium | 0 | 0 | 2 |
| Low | 8 | 0 | 25 |
HighCentralization Related RisksIskra - Audit 5 · CertiK · 22 Apr 2024Acknowledged
In the contract `OFTPermit` the role `owner` has authority over the functions shown in the list below. **Inherit `OFTCore` Contract** - function `setMsgInspector()`, to set the message inspector address for the OFT. This is an optional contract that can be used to inspect both `message` and `options`. **Inherit `OAppCore` Contract** - function `setPeer()`, to set the peer address (OApp instance) for a corresponding endpoint. - function `setDelegate()`, to set the delegate address for the OApp. The delegate is capable of making OApp configurations inside of the endpoint. **Inherit `OAppPreCrimeSimulator` Contract** - function `setPreCrime()`, to set the preCrime contract address. **Inherit `OAppOptionsType3` Contract** - function `setEnforcedOptions()`, to set the enforced options for specific endpoint and message type combinations. Provides a way for the OApp to enforce things like paying for PreCrime, AND/OR minimum dst lzReceive gas amounts etc. **Inherit `Ownable` Contract** - `transferOwnership` to set the new owner for the contract. - `renounceOwnership` to set address(0) as the new owner. Any compromise to the `owner` account may allow a hacker to take advantage of this authority, set the inspector address for the OFT, set the peer address and delegate address for the OApp, and set the enforced options for specific endpoint and message type combinations.
Open the reportHighCentralization Risks in ItemNFTSnapshot.solIskra - ItemNFTSnapshot · CertiK · 14 Aug 2023Acknowledged
In the contract `ItemNFTSnapshot` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and : - grant or revoke the capacity to mint tokens to any address; - grant or revoke the capacity to burn tokens to any address (if the contract has been deployed as burnable); - change the URI; 
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="iskra"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us