Skip to content

Instantly share code, notes, and snippets.

@danbogd
Created January 10, 2019 08:45
Show Gist options
  • Select an option

  • Save danbogd/fb12d6b67420aff432b7f2ade89eb7c2 to your computer and use it in GitHub Desktop.

Select an option

Save danbogd/fb12d6b67420aff432b7f2ade89eb7c2 to your computer and use it in GitHub Desktop.

Diligence Audit Report.

1. Summary

This document is a security audit report performed by danbogd, where Diligence has been reviewed.

2. In scope

3. Findings

In total, 3 issues were reported including:

  • 2 low severity issues.
  • 1 minor observation

No critical security issues were found.

3.1. Known vulnerabilities of ERC-20 token

Severity: low

Description

  1. It is possible to double withdrawal attack. More details here.

  2. Lack of transaction handling mechanism issue. WARNING! This is a very common issue and it already caused millions of dollars losses for lots of token users! More details here.

3.2. Token Transfer to 0x0 address

Severity: low

Description

The implemented token uses transfer to address 0x0 as basic burn mechanism, however accidental token loss issue can be applied.

3.3. Deprecated method.

Severity: minor observation

Description

The function () payable { revert(); } was a pattern used to prevent implicit acceptance of ether in Solidity versions older than 0.4.0, but today this is unneeded.

4. Conclusion

No critical vulnerabilities were detected,but we highly recommend to complete this bugs before use.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment