Zilliqa Token Audit Report.
1. Summary
This document is a security audit report performed by RideSolo, where Zilliqa Token has been reviewed.
Token desription:
Symbol : ZIL
Name : Zilliqa
Total supply: To be set in the construction phase
Decimals : 12
Standard : ERC20
2. In scope
- ZilliqaToken.sol github gist cd476ddc9a1c1685dc39e399fcd08b3e.
3. Findings
3 issues were reported:
- 1 medium severity issue.
- 1 low severity issue.
- 1 minor remark.
3.1. Owner Privileges
Severity: medium
Description
Owner can pause & unpause token transfers separately for two diffrent addresses groups, token holders and (owner,admin) addresses.
Code snippet
https://gist.github.com/yuriy77k/cd476ddc9a1c1685dc39e399fcd08b3e#file-zilliqatoken-sol-L236
3.2. Known vulnerabilities of ERC-20 token
Severity: low
Description
- It is possible to double withdrawal attack. More details here
- Lack of transaction handling mechanism issue. WARNING! This is a very common issue and it already caused millions of dollars losses for lots of token users! More details here
3.3. Gas Optimization
Severity: minor remark
Description
validDestination contains a requirement that is already implemented in the inherited transfer & transferFrom functions, require(_to!=0x0), adding more gas consumption.
Code snippet
https://gist.github.com/yuriy77k/cd476ddc9a1c1685dc39e399fcd08b3e#file-zilliqatoken-sol-L291
Conclusion
Users should be aware of pause unpause functionality.