Skip to content

Instantly share code, notes, and snippets.

@yuriy77k
Forked from MrCrambo/ETH_Scanetchain_report.md
Created August 31, 2019 11:14
Show Gist options
  • Save yuriy77k/2a199bc40fe873589b58155639a8e445 to your computer and use it in GitHub Desktop.
Save yuriy77k/2a199bc40fe873589b58155639a8e445 to your computer and use it in GitHub Desktop.

Summary

This is the report from a security audit performed on Scanetchain by MrCrambo.

The audit focused primarily on the security of Scanetchain smart contract.

In scope

  1. https://github.com/Scanetchain/Scanetchain-ERC20-Token/blob/master/Contracts/scanetchaintoken_new_final.sol

Findings

In total, 2 issues were reported including:

  • 0 high severity issues.

  • 0 medium severity issues.

  • 1 owner privilegies issues.

  • 1 low severity issues.

  • 0 notes.

Security issues

1. Owner privilegies

Severity: owner privilegies

Description

  • Owner can pause contract any time.

2. Known vulnerabilities of ERC-20 token

Severity: low

Description

Lack of transaction handling mechanism issue. More details here

Recommendation

Add function to withdraw other contract tokens.

Conclusion

Smart contract is free of issues.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment