Cartesi

CTSI Completed

Cartesi is a layer-2 platform for the development and deployment of scalable decentralized applications.

Security Score

100

043F053F

Project ID

Apr 24, 2020

Project Since

Cartesi Info

Ecosystem

Ethereum

Language

Solidity

Contracts

0x491604c0fdf08347dd1fa4ee062a822a5dd06b5d

Website

cartesi.io

Support

support@cartesi.io

Social Links

Code Security

Score

Excellent

Status

Audit Completed

Methods

Hackdra AI & Manuel Review

Code Audit History

All Findings 0

Resolved 0

Partially 0

Acknowledged 0

Severity	Resolved	Acknowledged
Critical
Major		2
Medium	2	3
Minor	5	1
Informational	5	1

File	SHA256
StakingPoolManagementImpl.sol	c708b4c71349c1093b68f3a2da03f9f56d4f64ad5e3623c08cbc650ff0ac90a2
StakingPoolStakingImpl.sol	67da59b89496d7321d0afff8eb1ab27ad42d42d5104cecea71fe88ba0ea8d2e3
StakingPoolImpl.sol	15e38100b19ae0ca87737d84eac78765a5e60255cd5de8c1008505e9e0bb1d22
FlatRateCommission.sol	8067440a5a3e3728a8e909110a12928415cd1948dd42aad0e422e2c88026d8e0
StakingPoolFactoryImpl.sol	2b90ab7a59e2a919d74644509e8c6419d4f2d79b7d77beb075a0081a691d47be
StakingPoolProducerImpl.sol	d162901c929faf9f6729c1e7eee5e45c1b984573b2d159a2c242c849726aeda6
StakingPoolWorkerImpl.sol	b4e72b397470ed4d7000aa5ccde384d6cf535e70df683cec4b41b30401b2d4c4
StakingPoolUserImpl.sol	fcea9626f12e9c82b24acd51f00ff6047cb7048c894f5bc7239e191aa3bfcf46
StakingPoolData.sol	66bc5186facd7c0e54311ee2d2b2eb224a4225d9bfb03e3de0c182d93c77ede2
GasTaxCommission.sol	e31202f8c0a1573f2b6fd49e5cb79d00aa51871cdb25d67ff346f37bbfda61ca

Incident	Date
Requested	September 6, 2021
Completed	September 22, 2021

Fundamental Health

Score

Good

Status

Member Verified

Methods

3rd Party

KYC History

Summary

KYC 3rd Party Verified

N/A

Project Since

Apr 24, 2020

Geographic Analysis

Secure Zone

Intelligence Analysis

No finding detected

AML Analysis

No finding detected

Trust Analysis

No finding detected

Operational Resilience

Score

Excellent

Status

Assets in Scope

Methods

Hackdra AI & Manuel Review

The bug bounty program is currently inactive.

Bug Bounty Program

Bug Bounty Active

KYC PoC

Bounty Live Since

26/05/2019

Funds Reserved

$ 0

Rewards by Severity

Critical

$ 0

Major

$ 0

Medium

$ 0

Low

$ 0

List of Assets

View All

https://hackdra.com

Website Platform Application

https://hackdra.com

Website Store Application

Infrastructure Security

Explore Penetration Testing

Summary

https://cartesi.io

Network Security

High

0 Attentions

Application Security

Medium

4 Attentions

DNS Health

High

0 Attentions

Network Security

FTP service anonymous login

VNC service accessible

RDP service accessible

LDAP server accessible

PPTP service accessible

rsync service accessible

SSH supports weak cipher

SSH supports weak MAC

CVE on the related service

Application Security

Missing X-Frame-Options header

YES

Missing HSTS header

YES

Missing X-Content-Type-Options header

YES

Missing Content Security Policy (CSP)

YES

HTTP access allowed

Self-signed certificate

Wrong host certificate

Expired certificate

SSL/TLS supports weak cipher

Support SSL protocols

Support TLS weak version

DNS Health

Missing SPF record

Missing DMARC record

Missing DKIM Record

Ineffective SPF record

SPF record contains a softfail without DMARC

Name Servers Versions exposed

Allow Recursive Queries

CNAME in NS Records

MX Records IPs are private

MX Records has Invalid Chars

Governance Strength

Score

Excellent

Status

Assets in Scanned

Methods

Ulgen AI & Manuel Review

Summary

0x491604c0fdf08347dd1fa4ee062a822a5dd06b5d

N/A

0x0e28A8f88C6266dF0FE274c15c1d4b27f8B373C0

Centralization Risk

Low

3 Attentions

Contract Uncertainty

Open Source

YES

Proxy Contract

External Call Risk

Mint Function

YES

Self Destruct

Owner Privilege

Retrieve Ownership

Balance Modifiable

Hidden Owner

Creator Percentage

0.00%

Ownership Renounce

Owner Percentage

0.00%

Trading Constraint

Honeypot

Buy Tax

0.00%

Sell Tax

0.00%

Modifiable Tax

Transfer Pausable

Anti Whale

Modifiable Anti Whale

Blacklist

Market Stability

Score

Excellent

Status

Active

Methods

CEX & DEX

Market Stability Analytics

Partnered with TradingView

View Detailed Chart

Community Trust

Score

Excellent

Status

Active Communities

Methods

Hackdra Analysis Experts

Summary

Cartesi Community

Ecosystem and Strategies

High

1 Attentions

Digital Communication and Community

High

0 Attentions

Information Sources and Support

High

3 Attentions

Ecosystem and Strategies

Investors

Advisors

YES

Global Reach

YES

Developers

YES

Business Partners

YES

Marketing Strategies

YES

Community Managers

YES

Media and Press

YES

Regulators

YES

Digital Communication

AMA's

YES

X (Twitter)

YES

Discord

YES

Github

YES

Youtube

YES

Instagram

YES

Medium

YES

Information Sources

Knowledge Base

Whitepaper

YES

Roadmap

YES

User Support

Sustained Communication

YES

Live Support

YES

FAQ

YES

Educational Resources

Hackdra Disclaimer

Hackdra conducts security assessments on the provided source code exclusively. Conduct your own due diligence before deciding to use any info listed at this page.