ETH_Link_report.md

Summary

This is the report from a security audit performed on Link by MrCrambo.

The audit focused primarily on the security of Link smart contract.

In scope

1. https://gist.github.com/yuriy77k/c3a70d212a7f9ecda715252e45073158

Findings

In total, 2 issues was reported including:

• 0 high severity issues.

• 0 medium severity issues.

• 2 low severity issues.

Security issues

1. No zero address checking

Severity: low

Description

In functions transfer(Line 81) and transferFrom(Line 118) there are no zero address checking.

2. Known vulnerabilities of ERC-20 token

Severity: low

Description

1. It is possible to double withdrawal attack. More details here
2. Lack of transaction handling mechanism issue. More details here

Recommendation

Add into a function transfer(address _to, ... ) following code:

require( _to != address(this) );

Conclusion

Smart contract is free of critical issues.