As of 3 Nov 2026, Shopdi has 1 audit report on Trustblock, by CertiK, dated 27 Sep 2022. That report lists no open critical findings.
Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.
Newest first
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 0 |
| Medium | 0 | 1 | 0 |
| Low | 1 | 0 | 7 |
Any call of the form `transferFrom(from, dest, amount)` with a value for amount that exceeds the balance of address from is expected to fail. However, in Token, some invocations of `transferFrom(from, dest, amount)` succeed even though the value in amount exceeds the available balance for address from. This is only marked minor however, as the balance is not increased. Here is an example: - TokenStrategy is set to a new EOA, but is not set to be tax exempt. - Assume that TokenStrategy has a balance of 1000 tokens. - Assume that the current tax rate is 1%. - Then if TokenStrategy calls `transfer(TokenStrategy,1010)` it will succeed when it should fail. - Similarly if msg.sender has sufficient approval and calls `transferFrom(TokenStrategy,TokenStrategy,1010)` it will succeed when it should fail. The issue is that first the tax is taken and then the amount. However, since the tax is given to the same address, the balance is not decreased so that as long as the amount after tax is less than the accounts balance the call will succeed.
Open the reportThe reports name a repository or files. Open a report to see its scope.
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="shopdi"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us