ExploreCoin security audit report

ETH_ExploreCoin_report.md

ExploreCoin security audit report

Summary

This is the report from a security audit performed on ExploreCoin by gorbunovperm.

ExploreCoin (EPL) is an ERC 20 token, smart contract recently deployed.

https://www.explorecoin.io/

In scope

1. TokenMintERC20Token.sol

Findings

In total, 2 issues were reported including:

• 0 high severity issue.

• 0 medium severity issues.

• 1 low severity issues.

• 1 minor observations.

Security issues

1. Known vulnerabilities of ERC-20 token

Severity: low

Description

• It is possible to double withdrawal attack. More details here

• Lack of transaction handling mechanism issue. WARNING! This is a very common issue and it already caused millions of dollars losses for lots of token users! More details here

Recommendation

Add into a function transfer(address _to, ... ) following code:

require( _to != address(this) );

2. EPL Token is not Burnable

Severity: minor observation

Code snippet

• TokenMintERC20Token.sol, line 251
• TokenMintERC20Token.sol, line 281

Description

In this contract, there are _burn and _burnFrom functions implying the burning of tokens. But burning is impossible because both functions are internal.

Conclusion

There is no serious vulnerabilities were found in this contract.