Certik — Secretworld Final Audit and Security Report

First metaverse bridge between real and the virtual world on blockchain.

4 min readFeb 13, 2022

Dear Community,

We understand that security is the main priority and most important concern in the DeFi industry. We do not want to put user’s funds at risk. Team Secretworld have successfully stopped and corrected the issue before it made a big impact on the investors. Secretworld bore all the costs of the unfortunate event.

Codebase

https://github.com/secretworldBSC/secretworld-token/blob/main/secretworld.sol

https://bscscan.com/address/0xd87dc2841aab1ba556f4823eb3e5d35abb9b9dc9

We have then moved to evaluate audit report, with some refactors to fix the issue. However, to ensure the new contract is safe for users. We have decided to proceed to an audit with Certik — the most popular and renowned Audit agency and we have already received a preliminary report.

As you can see in the attached file, there are no critical issues with the contract, but only a major vulnerability, a few minor redundant codes, and informational issues that won’t have any impact on the contract.

GLOBAL-01 | Centralization Related Risks

This function for withdraw irrelevant tokens to keep our contract address holding clean on bsc scan. Sometimes community accidental transfer their tokens to our contract address which can be recover using this function.

CKP-01 | Unlocked Compiler Version

Acknowledged

VIF-01 | Token Minted To Centralized Address

Team is aware, and they already implemented multi-signature mechanisim for the admin account to avoid uncertanity.

CKP-02 | Unknown Imported Source Files

These source files used in contract to perform basic functionalities like computations.

CKP-04 | Incorrect Error Message

Because same tokens can withdraw using transfer function.

$SSD token-holders can delegate their voting rights to themselves or an address of their choice. $SSD holders’ votes will count proportionately to their $SSD balance.

CertiK conducts its audits with the rigor of Formal Verification, which stands at the apex of source code validation. Rather than merely checking for bugs and vulnerabilities, Formal Verification leverages rigorous mathematical theorems to check whether the source code of a program meets its specification, computing all possible scenarios and proving that it is impossible for certain checked vulnerabilities to exist. CertiK has conducted audit reports for $SSD, and the report confirms that it has passed the audit requirements with over a 98% rating.

Malicious hackers have plagued the blockchain space and stifled the growth of many promising projects. By conducting Formal Verification audits on projects like Secretworld, CertiK aims to guard against some of the most frequent and critical vulnerabilities that have been the source of these attacks. Together, both organizations envision a safer blockchain ecosystem with higher security standards that would prevent against many of the hacks of the past.

For detailed audit report please refer to audit page:

https://www.certik.com/projects/secretworld

About Secretworld.network

Secret world is a virtual universe where members can play, earn and own digital content in the secret society universe supported by Binance smart chain. In the Secret World, the secret society metaverse is a bridge between the physical world and the virtual world. Cryptographic protocols will emerge for managing digital value. All assets in this secret society metaverse are facilitated by NFTs on the Binance Smart chain, allowing affordable and seamless transactions. The Secret World offers an exciting gaming module for Secret world players. The game entertains a large audience due to its unique game strategy and gaming mode, besides, exciting visuals on the network and in the game. Meanwhile, the blockchain of today attracts gamers naturally due to the intrinsic property of scalability and exposure.

SSD Vision & Mission

Our mission and vision is to revolutionize blockchain gaming while keeping the true essence of PVE games alive. The secret world game is inspired by the presence of secret societies operational in different areas of the world. It is an attempt to bring new gaming technologies into our old games to strike the right balance of innovation and nostalgia. We aim to transform the Secret world into an ecosystem. This platform is not limited to NFT and tokens. We aim to provide entertainment and a fun way to learn and earn in the crypto space. The secret world is the future of the Metaverse.

For more information, visit SecretWorld.network or Read Whitepaper