GoPlus: WebKey DAO and NVB Bank’s token contracts have unlimited issuance capabilities and have been marked as high risk

Mars Finance News, Web3 security company GoPlus Security posted on X platform that it conducted a security analysis of 11 tokens in the second round of weekly competition for the BNB Chain $4.4 million liquidity support plan, discovering potential risks in some tokens. Among the 11 tokens listed, WebKey DAO and NVB Bank were marked with high-risk warnings, BabyMove was marked with a medium-risk warning, and the rest were marked with low-risk ratings (no obvious security risks were found). GoPlus Security stated that WebKey DAO's token contract has unlimited issuance capabilities, with a large number of tokens still available for issuance. This means developers can create a large number of new tokens at any time, significantly diluting the value of tokens held by users; NVB Bank's token also has unlimited issuance functionality, with no upper limit on token creation. BabyMove's contract made external calls to an upgradeable proxy contract, which could potentially lead to issues.