The audit focused primarily on the security of Pundi X smart contract.
In total, 4 issues were reported including:
0 high severity issues.
0 medium severity issues.
1 owner privilegies issues.
3 low severity issues.
1. No events
There is no event in function
transferOwnership at line 71.
2. Zero address checking
There are no zero address checking in functions
deposit at line 212,
mint at line 389,
deposit at line 465
3. Known vulnerabilities of ERC-20 token
- It is possible to double withdrawal attack. More details here
- Lack of transaction handling mechanism issue. More details here
Add into a function
transfer(address _to, ... ) following code:
require( _to != address(this) );
4. Owner privilegies
Severity: owner privilegies
pause transfers any time. Line 539.
Smart contract is free of critical issues.