Northstar Finance (NORTH) security report
Automated analysis identified upgrade authority and unrestricted minting controlled by a single privileged account. These controls can materially alter token holder outcomes.
The contract is verified, but the current privilege model creates high-impact centralized control risks.
Trust score: 46/100. Source verified: Yes. Chain: Ethereum. Contract: 0xA4cBf8D38d9dCb22F0D667B7eA8f0A12809cAe11.
This report was last modified on 2026-09-19 and contains 2 material findings.
high finding: Privileged account can mint unlimited supply
The owner can create an arbitrary quantity of new tokens, enabling severe dilution or liquidity extraction.
Evidence: mint(address,uint256) has no supply ceiling and is restricted only by the current owner role.
Recommendation: Add an immutable maximum supply or remove mint authority after distribution.
high finding: Upgradeable implementation controlled by one signer
A single privileged account can replace implementation logic without delay, invalidating assumptions made from the current source.
Evidence: The proxy admin upgrade path has no multisig or timelock constraint visible in supplied evidence.
Recommendation: Require a multisig and enforce an upgrade timelock with public monitoring.