F-2025-0010·spec-deviation

Unofficial EIP-4908 designation creates trust and credibility concerns

Fixednfterc721erc20
TL;DR

The protocol uses the designation ERC-4908 for its token standard, but ERC-4908 is not an official EIP and using an unofficial number can mislead users and harm credibility.

Severity
LOW
Impact
LOW
Likelihood
MEDIUM
Method
MManual review
CAT.
Complexity
LOW
Exploitability
LOW
02Section · Description

Description

The protocol utilizes the designation "ERC-4908" for its token standard; however, this is not an official Ethereum Improvement Proposal (EIP) and does not appear in the official EIP repository or documentation. Using an unofficial EIP number creates several concerns:

  • It misleads users and developers into believing this is a standardized, peer-reviewed protocol when it is actually a custom implementation.
  • It may cause issues when developers try to find official documentation or reference implementations.
  • It can damage trust and credibility when users discover the EIP number does not correspond to any official standard, potentially making the platform appear deceptive or unprofessional.

The use of unofficial EIP numbers is particularly problematic in the blockchain space, where standards compliance and transparency are crucial for adoption and trust. Users and developers who perform due diligence by checking the official EIP documentation will find no reference to ERC-4908, which may raise concerns about the project's legitimacy and technical practices.

03Section · Impact

Impact

Trust and credibility concerns; mismatch between the contract designation and what users can verify in the official EIP registry.

04Section · Recommendation

Recommendation

  1. Remove the EIP designation and use a descriptive name for the contract (e.g., TimeBasedAccessNFT, SubscriptionAccessToken, or KnowledgeAccessNFT).
  2. Update all documentation and references to reflect the custom nature of the implementation rather than implying it is a standard.
05Section · Resolution

Resolution

Ipal Network: Confirmed. We agreed with the recommendation and have renamed the contract to KnowledgeAccessNFT.

Zealynx: Fixed. The contract no longer uses the unofficial "ERC4908" designation and has been renamed to KnowledgeAccessNFT.

Status
Fixed
F-2025-0010

oog
zealynx

Smart Contract Security Digest

Monthly exploit breakdowns, audit checklists, and DeFi security research — straight to your inbox

© 2026 Zealynx