Nabox

NABOX Completed

Nabox is a Multi-chain DID Gateway to Web3. Nabox allows you to manage your digital assets quickly and easily across Ethereum, BSC, Polygon, OKExChain, Heco, Harmony, NULS and Nerve blockchains.

Security Score

100

66804612

Project ID

Feb 18, 2021

Project Since

Nabox Info

Ecosystem

Ethereum

Language

Solidity

Contracts

0x03d1e72765545729a035e909edd9371a405f77fb

Website

nabox.io

Support

N/A

Social Links

Code Security

Score

Excellent

Status

Audit Completed

Methods

Hackdra AI & Manuel Review

Code Audit History

All Findings 0

Resolved 0

Partially 0

Acknowledged 0

Severity	Resolved	Partially	Acknowledged
Critical		1
Major	1		2
Medium			1
Minor	5		3
Informational	2		4

File	SHA256
NaboxPool.sol	c21f1c102665ab5300c6e4f01b921fbd58ab3178a6a6bf831b3ad511072fa72a
LockedNaboxPool	9e7ba6d58a2625f7572325d17a2bca053b6a603bffe7dba7f97074eddd9612ea

Incident	Date
Requested	November 23, 2021
Completed	December 3, 2021

Fundamental Health

Score

Good

Status

Member Verified

Methods

3rd Party

KYC History

Summary

KYC 3rd Party Verified

N/A

Project Since

Feb 18, 2021

Geographic Analysis

Secure Zone

Intelligence Analysis

No finding detected

AML Analysis

No finding detected

Trust Analysis

No finding detected

Operational Resilience

Score

Excellent

Status

Assets in Scope

Methods

Hackdra AI & Manuel Review

The bug bounty program is currently inactive.

Bug Bounty Program

Bug Bounty Active

KYC PoC

Bounty Live Since

26/05/2019

Funds Reserved

$ 0

Rewards by Severity

Critical

$ 0

Major

$ 0

Medium

$ 0

Low

$ 0

List of Assets

View All

https://hackdra.com

Website Platform Application

https://hackdra.com

Website Store Application

Infrastructure Security

Explore Penetration Testing

Summary

https://nabox.io

Network Security

High

3 Attentions

Application Security

Medium

4 Attentions

DNS Health

High

1 Attentions

Network Security

FTP service anonymous login

VNC service accessible

RDP service accessible

LDAP server accessible

PPTP service accessible

rsync service accessible

SSH supports weak cipher

YES

SSH supports weak MAC

YES

CVE on the related service

YES

Application Security

Missing X-Frame-Options header

Missing HSTS header

YES

Missing X-Content-Type-Options header

YES

Missing Content Security Policy (CSP)

YES

HTTP access allowed

Self-signed certificate

Wrong host certificate

Expired certificate

SSL/TLS supports weak cipher

Support SSL protocols

Support TLS weak version

YES

DNS Health

Missing SPF record

Missing DMARC record

Missing DKIM Record

YES

Ineffective SPF record

SPF record contains a softfail without DMARC

Name Servers Versions exposed

Allow Recursive Queries

CNAME in NS Records

MX Records IPs are private

MX Records has Invalid Chars

Governance Strength

Score

Excellent

Status

Assets in Scanned

Methods

Ulgen AI & Manuel Review

Summary

0x03d1e72765545729a035e909edd9371a405f77fb

N/A

0x3250dABB584f7FEA1BAFAFf6000FFBBD2F419A15

Centralization Risk

Low

3 Attentions

Contract Uncertainty

Open Source

YES

Proxy Contract

External Call Risk

Mint Function

YES

Self Destruct

Owner Privilege

Retrieve Ownership

Balance Modifiable

Hidden Owner

Creator Percentage

0.00%

Ownership Renounce

Owner Percentage

0.00%

Trading Constraint

Honeypot

Buy Tax

0.00%

Sell Tax

0.00%

Modifiable Tax

Transfer Pausable

Anti Whale

Modifiable Anti Whale

Blacklist

Market Stability

Score

Excellent

Status

Active

Methods

CEX & DEX

Market Stability Analytics

Partnered with TradingView

View Detailed Chart

Community Trust

Score

Good

Status

Active Communities

Methods

Hackdra Analysis Experts

Summary

Nabox Community

Ecosystem and Strategies

High

2 Attentions

Digital Communication and Community

Medium

4 Attentions

Information Sources and Support

High

3 Attentions

Ecosystem and Strategies

Investors

Advisors

YES

Global Reach

YES

Developers

YES

Business Partners

YES

Marketing Strategies

YES

Community Managers

YES

Media and Press

Regulators

YES

Digital Communication

AMA's

X (Twitter)

YES

Discord

YES

Github

YES

Youtube

YES

Instagram

YES

Medium

Information Sources

Knowledge Base

Whitepaper

YES

Roadmap

YES

User Support

Sustained Communication

YES

Live Support

YES

FAQ

YES

Educational Resources

Hackdra Disclaimer

Hackdra conducts security assessments on the provided source code exclusively. Conduct your own due diligence before deciding to use any info listed at this page.