ZEROTRACE (ZKTRACE) security report
Radar AI reviewed ZEROTRACE on Ethereum. The token is a fixed-supply OpenZeppelin ERC20 without owner controls, post-deployment minting, blacklist logic, or token-level transfer taxes. An external Uniswap V4 hook is documented as handling swap taxation but was not supplied for review.
No Critical or High-severity vulnerability was identified in the reviewed token contract. The token contract itself has standard transfer and allowance behavior and mints its fixed supply only during construction. A medium-severity scope and integration risk remains because any swap tax or restriction implemented by the external Uniswap V4 hook is outside this token source and cannot be validated from the supplied materials.
Trust score: 82/100. Source verified: Yes. Chain: ethereum. Contract: 0xa3fd09e53b90d3779829f7d26fbd60c24c3e9b85.
This report was last modified on 2026-10-08 and contains 1 material finding.
medium finding: External Uniswap V4 hook behavior is outside the reviewed token contract
The token contract does not implement swap fees or pool-specific transfer controls. Its source documentation states that the swap tax is implemented by the official Uniswap V4 pool hook. Because the hook source, address, and configuration were not supplied, fee behavior and any hook-enforced trading restrictions cannot be independently assessed from this token review.
Evidence: The ZeroTrace.sol source comment states: "The swap tax lives in the Uniswap V4 hook of the official pool, not in the token." The verified ABI contains only standard ERC20 functions and no fee, blacklist, ownership, or pool-management functions.
Recommendation: Review and verify the deployed Uniswap V4 hook address, source, fee logic, access controls, and pool configuration before relying on the token-level review. Treat the token contract and its external pool hook as separate security scopes.