SuperToken (Base)

0xa69f80524381275a7ffdb3ae01c54150644c8792 · Base
Smart contract · scanned 4 h ago · Explorer

Findings

  • high Unprotected initializer
    A public initialize function has no initializer guard or caller check, so anyone may be able to call it.
  • medium Privileged mint function
    An owner or role can mint new tokens.
  • low Upgradeable contract
    The contract’s logic can be replaced by whoever controls upgrades.
  • info Floating pragma
    The pragma allows a range of compiler versions instead of the exact one used.
  • info Inline assembly
    The contract uses inline assembly, which bypasses the compiler’s safety checks.

Evidence, exact locations and fixes are in the deep report. How scoring works.

Scan notes

GoPlus token data unavailable — token checks skipped

Source truncated to 300 KB for this scan

Get the full picture

Evidence, locations, fixes and an AI code review. Private link, no email.

For the team behind it: prove ownership and add active checks.

Paid in crypto via NOWPayments. Automated pre-audit, not an audit.

Facts

Contract
SuperToken
Compiler
solc 0.8.30
Verified
Sourcify full match
Proxy
ERC-1967
Implementation
0x3e834ac987635976beb4ab944cf683db5c0e3e80
Owner
0xac808840f02c47c05507f48165d2222ff28ef4e1
Code size
4239

Badge

DappVet score 71

[![Vetted by DappVet](https://dappvet.com/badge/anA4dD4E.svg)](https://dappvet.com/c/base/0xa69f80524381275a7ffdb3ae01c54150644c8792)

Share on X

Changed something?

Scores refresh every 6 hours. Rescan now to pick up a fix.