This document is a security audit report performed by danbogd, where airswap has been reviewed.
Сommit hash 04b71ad419ef645e8bd9b50e9998819b7a450616.
In total, 3 issues were reported including:
- 0 medium severity issues
- 1 low severity issues
- 1 owner privileges (ability of owner to manipulate contract, may be risky for investors)..
- 1 notes.
No critical security issues were found.
-
It is possible to double withdrawal attack. More details here.
-
Lack of transaction handling mechanism issue. WARNING! This is a very common issue and it already caused millions of dollars losses for lots of token users! More details here.
Add into a function transfer(address _to, ... ) following code:
require( _to != address(this) );
Contract owner allow himself to:
Pause/unpause transfer/transferFrom, check here.
The time after which AirSwap tokens become transferable is set (17 Oct 2017 14:10:10 GMT) is not correct and requires update.
The audited smart contract is safe to deploy, some low severity issues were found.