TRONDapphub security audit report

TRX_TRONDapphub_report.md

TRONDapphub security audit report

Summary

This is the report from a security audit performed on TRONDapphub by gorbunovperm.

TRONDapphub aims to host 100+ games in 1 Platform by 2020. Currently, we have 60 games available to deploy by Q4 2019.

• TRONdapphub.io aims to provide both Mobile and Web Gaming experience to its Users.
• TRONdapphub.io mission is to be the Biggest Dapp by Volume and Usage standpoint on Tron Ecosystem by hosting most Popular Traditional PVP Games like Bowling, Billiards, Football, and Casino Games like Dice, Texas Holdem, Black Jack, Baccarat, High Low, Let it Ride, Casino War, Slots, Keno.
• Our goal as a team is to create the fairest provability across all our games.

https://trondapphub.io/

In scope

Commit hash: 3cf4e716c3e8cf2e4339657b1fbca51d9c19bc96

1. TDHtoken.sol

Findings

In total, 1 issues were reported including:

• 0 high severity issue.

• 0 medium severity issues.

• 1 low severity issues.

• 0 minor observations.

Security issues

1. Known vulnerabilities of ERC-20 token

Severity: low

Description

• It is possible to double withdrawal attack. More details here

• Lack of transaction handling mechanism issue. WARNING! This is a very common issue and it already caused millions of dollars losses for lots of token users! More details here

Recommendation

Add into a function transfer(address _to, ... ) following code:

require( _to != address(this) );

Conclusion

There are some minor vulnerabilities were discovered in this contract.