GoPlus: The token contracts of WebKey DAO and NVB Bank have an unlimited issuance feature and are marked as high risk

ChainCatcher news, Web3 security company GoPlus Security stated on the X platform that it conducted a security analysis of 11 tokens in the second round of the $4.4 million liquidity support program for BNB Chain and found that some of these tokens have potential risks. Among the 11 tokens listed, WebKey DAO and NVB Bank were marked as high-risk warnings, BabyMove was marked as a medium-risk warning, and the rest were marked as low-risk ratings (no obvious security risks were found).

GoPlus Security indicated that the token contract of WebKey DAO has unlimited minting capabilities, and there are still a large number of tokens that can be minted. This means that developers can create a large number of new tokens at any time, significantly diluting the value of the tokens held by users; the tokens of NVB Bank also have unlimited minting functionality, and there is no upper limit on token creation. The contract of BabyMove makes external calls to an upgradable proxy contract, which may lead to potential issues.