GoPlus Warns Hello 402 Contract Has Unlimited Minting and Centralized Manipulation Risks

iconTechFlow
Share
Share IconShare IconShare IconShare IconShare IconShare IconCopy

Derived from TechFlow, GoPlus has identified potential risks in the Hello 402 contract, including unlimited minting and centralized manipulation. The admin address has full control over H402 token minting and distribution. For example, the addTokenCredits function allows the admin to allocate H402 token minting shares without checking if it exceeds the MAX_SUPPLY, potentially creating a backdoor for unlimited minting. The redeemTokenCredits function enables users to mint H402 tokens based on their shares, while the WithdrawDevToken function allows the admin to mint all unallocated shares at once, posing a high centralized manipulation risk. Additionally, the project's claims on X regarding the WithdrawDevToken function for post-private sale 'token top-up,' 'ecosystem incentives,' and 'profit space' are not implemented in the contract, raising centralized breach risks. Earlier reports suggested Hello 402 may have 'run away.'

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.