Kryptomon

The KmonMigrate.sol and KmonMinter.sol owners can withdraw funds from the contract any time without notifying anyone.

As per the Chainlink documentation → the CCIP version 1.0.0 has been deprecated, on mainnet. The system should take that into consideration.

This audit report focuses exclusively on the security assessment of the contracts within the specified review scope. Interactions with out-of-scope contracts are presumed to be correct and are not examined in this audit. We want to highlight that Interactions with contracts outside the specified scope, such as:

• DAOFacet.sol

• LibItems.sol

• LibAppStorage.sol

• LibERC1155.sol

• DAOFacet.sol

• ItemsFacet.sol

• KmonMigrationFacet.sol

• LibKmonMigration.sol

• LibKryptomon.sol

• KryptomonFacet.sol

• LibStrings.sol

• ItemsTransferFacet.sol

• LibMeta.sol

• LibERC721.sol

have not been verified or assessed as part of this report.

While we have diligently identified and mitigated potential security risks within the defined scope, it is important to note that our assessment is confined to the isolated contracts within this scope. The overall security of the entire system, including external contracts and integrations beyond our audit scope, cannot be guaranteed.

Users and stakeholders are urged to exercise caution when assessing the security of the broader ecosystem and interactions with external contracts. For a comprehensive evaluation of the entire system, additional audits and assessments outside the scope of this report are necessary.

In other words, HACKEN hereby disclaims any responsibility for security issues arising from interactions with out-of-scope contracts, including but not limited to

DAOFacet.sol

LibItems.sol

LibAppStorage.sol

LibERC1155.sol

DAOFacet.sol

ItemsFacet.sol

KmonMigrationFacet.sol

LibKmonMigration.sol

LibKryptomon.sol

KryptomonFacet.sol

LibStrings.sol

ItemsTransferFacet.sol

LibMeta.sol

LibERC721.sol

Despite HACKEN's differing opinion on the matter, it is explicitly stated that security checks were not conducted on these out-of-scope interactions. HACKEN cannot be held liable for any security issues that may have occurred in connection with these out-of-scope contracts or any issues arising from the interactions with them, as HACKEN was not granted permission to assess their logic.

This report serves as a snapshot of the security status of the audited contracts within the specified scope at the time of the audit. We strongly recommend ongoing security evaluations and continuous monitoring to maintain and enhance the overall system's security.