GoPlus Security Warning: WebKey DAO and NVB Bank's token contracts have unlimited issuance function

PANews reported on April 9 that Web3 security company GoPlus Security issued a statement on X platform that it conducted a security analysis of 11 tokens in the second round of the BNB Chain's $4.4 million liquidity support plan, and found that some of the tokens had potential risks. Of its 11 tokens listed, WebKey DAO and NVB Bank are marked as high-risk warnings, BabyMove is marked as medium-risk warnings, and the rest are marked as low-risk ratings (no obvious security risks are found).

GoPlus Security said that WebKey DAO's token contracts have unlimited issuance capabilities, and there are still a large number of tokens that can be issued additionally. This means that developers can create a large number of new tokens at any time, thereby significantly diluting the value of tokens held by users; NVB Bank's tokens also have unlimited issuance functions, and the token creation is unlimited. This contract from BabyMove makes external calls to the upgradeable proxy contract, which can lead to potential problems.