Script Network security record

BNB Chainscript.tvGitHub

As of 14 Oct 2026, Script Network has 1 audit report on Trustblock, by CertiK, dated 15 Dec 2023. That report lists no open critical findings.

Critical findings
No open critical findings
In that report, 1 critical finding was reported. It is marked fixed by the firm that reported it. See the findings
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Statuses are the security firms’ own. Trustblock does not review code.

Audits1

Newest first

AuditSecurity firmDateScopeCritical findingsReport
Script.tv WalletSecurity firm: CertiKDate: Scope: Not recorded. See the report1 critical finding, fixedOpen · skynet.certik.com

Findings5

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical001
High000
Medium002
Low011
CriticalThe wallet keystore file is sent to the server duScript.tv Wallet · CertiK · 15 Dec 2023Fixed

The application's wallet creation feature is designed to generate a new crypto wallet for users. A security issue has been identified wherein the wallet key file is uploaded to the server during the wallet creation process.

Open the report
MediumInsecure Hash Function Implementation and MisleadScript.tv Wallet · CertiK · 15 Dec 2023Fixed

The `CryptoService.js` file is contained within the "script-tv wallet" codebase to perform cryptographic operations. Specifically, two functions are outlined: `getHash` which computes an MD5 hash of the input text, and `encryptHmacSHA256` which generates an HMAC-SHA512 hash of the input text using a hardcoded secret.

Open the report
MediumWeak Password PolicyScript.tv Wallet · CertiK · 15 Dec 2023Fixed

An authentication mechanism is only as strong as its credentials. For this reason, it is important to require users to have strong passwords. A lack of password complexity significantly reduces the search space when trying to guess a user's password, making brute-force attacks easier. The currently implemented password policy is permissive regarding the password length and complexity requirements, as it allows passwords to contain only 1 character.

Open the report
LowVerbose Error Message Exposure from Server-Side AScript.tv Wallet · CertiK · 15 Dec 2023Fixed

During the security assessment, it was observed that the script-tv wallet application communicates with server-side APIs for various functions. Some of these server APIs, when encountering an error, respond with explicit error messages.

Open the report

Contracts

No deployed address is recorded for these audits.

The reports name a repository or files. Open a report to see its scope.

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
	<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
	<div
		data-tb-project-widget
		data-tb-project-slug="script-network"
	></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us