CreaEther_audit_report.md

CreaEther Audit Report.

1. Summary

This document is a security audit report performed by danbogd, where CreaEther has been reviewed.

2. In scope

• CreaEther.sol.

3. Findings

In total, 4 issues were reported including:

• 2 low severity issues.
• 2 minor observation

No critical security issues were found.

3.1. Known vulnerabilities of ERC-20 token

Severity: low

Description

1. It is possible to double withdrawal attack. More details here.

3.2. No checking for zero address.

Severity: low

Description

Transfer & transferFrom, approve functions do not prevent from sending tokens to address 0x0.

3.3. Consider using latest version of solidity.

Severity: minor observation

Description

The contracts use solidity version 0.4.18. It is suggested to use the latest version and fix all compiler warnings that arise.

3.4. Deprecated method.

Severity: minor observation

Description

The function () payable { revert(); } was a pattern used to prevent implicit acceptance of ether in Solidity versions older than 0.4.0, but today this is unneeded.

4. Conclusion

No critical vulnerabilities were detected,but we highly recommend to complete this bugs before use.