As of 3 Nov 2026, ROALAND FOUNDATION has 1 audit report on Trustblock, by CertiK, dated 1 May 2023. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Project ROA - audit | Security firm: CertiK | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · skynet.certik.com |
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 0 | 2 |
The project ROA relies on the Solana token program to create fungible tokens. The `owner` account will be granted the following authority: - **Mint Authority**: the owner account can mint new tokens via `MintTo` instruction. - **Freeze Authority**: the owner account has the authority over the following instructions related to the account freeze: - `FreezeAccount`: Freeze an initialized account, for example, temporarily stopping account transfers, approvals, burning, etc. - `ThawAccount`: Thaw a frozen account. Any compromise to the owner account may allow the hacker to take advantage of this authority, for example, mint an arbitrary amount of new tokens.
Open the reportThe reports name a repository or files. Open a report to see its scope.
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="project-roa"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us