Dexaran Dexaran

ETC dice game audit report.

Summary

In scope

Findings

ETC TokenMint audit report.

Summary

This is the report from a security audit performed on ETC TokenMint by yuriy77k.

TokenMint is a service that offers to launch an ICO and deploy a custom token contract easily.

In scope

Ethereum Classic Multisig Wallet audit report.

Summary

This is the report from a security audit performed on Ethereum Classic Multisig Wallet by Dexaran. This contracts are a version of OpenZeppelin Multisig Wallet.

The audit focused primarily on the security of funds and fault tolerance of the multisig wallet. The main intention of this multisig wallet is to serve as an official storage of funds donated for ETC development.

In scope

Previously described at: ERC20 critical problems medium article.

Description.

ERC20 is the most common Ethereum token standard. It should be noted that it is also the first Ethereum's token standard as well.

It is also important that the original ERC20 proposal is a definition of token interface. EIP20 does not define a reference implementation for this token standard. Here is OpenZeppelin implementation of ERC20 token: https://github.com/OpenZeppelin/zeppelin-solidity/tree/master/contracts/token/ERC20

ERC20 token standard implementation assumes two ways of token transferring: (1) transfer function and (2) approve + transferFrom pattern.

1. ECNS HashRegistrar update.

Problem that is solved by this project:

Prevents the burning of funds. Even unrevealed bids will not be completely lost now.
This also incentivises users to stay tuned with ECNS. You can just pick up 5% of the Deed value if someone has left his bid unrevealed.
Security improvements. ENS relies on block.timestamp, which is a potential security issue, since a miner can artificially affect the timestamp of a mined block. ECNS will rely on block number because the block number can not be directly affected by miners.

CORION platform audit report

Summary

This is the report from a security audit performed on CORION platform by Dexaran. The audit focused primarily on the fault tolerance of the system. I can conclude that smart-contracts were not in the final state at the time of the audit start, and the changes were applied during the audit process, which made it more time consuming.

The whole system is modular. Contracts are upgradeable. The debug mode allows to intervene into contracts workflow to fix any error during the contracts workflow.

	//
	// Implementation of the standard account contract as per EIP101 (Cryptocurrency
	// abstraction). See: https://github.com/ethereum/EIPs/issues/28
	//
	// Written by Alex Beregszaszi, use under the MIT license.
	//

	contract StandardAccount {
	uint256 nextSequence = 1;