This document is a security audit report performed by RideSolo, where Bankorus Token has been reviewed.
Symbol : BKTS
Name : Bankorus Token
Total supply: Mintable
Decimals : 18
Standard : ERC20
3 issues were reported including:
- 3 low severity issues.
- Pause/Unpause token transfers and approvals.
- Unlimited token minting.
modifier whenNotPaused() {
require(!_paused);
_;
}
function mint(address to, uint256 value) public onlyMinter returns (bool) {
_mint(to, value);
return true;
}
decreaseAllowance
throw in case if the value to be substracted is higher than the amount that is allowed, if the address owner wants to change the value allowed by reducing it and the spender withdraw a part of it before, the function might throw and give more chances for the spender to take the rest of the allowed value.
The value should be set to zero if the value to be subtracted is higher than the allowance.
function decreaseAllowance(address spender, uint256 subtractedValue) public returns (bool) {
_approve(msg.sender, spender, _allowed[msg.sender][spender].sub(subtractedValue));
return true;
}
- It is possible to double withdrawal attack. More details here
- Lack of transaction handling mechanism issue. WARNING! This is a very common issue and it already caused millions of dollars losses for lots of token users! More details here
function _transfer(address from, address to, uint256 value) internal {
require(to != address(0));
_balances[from] = _balances[from].sub(value);
_balances[to] = _balances[to].add(value);
emit Transfer(from, to, value);
}
Add the following code to the _transfer(_to address, ...)
function:
require( to != address(this) );
function _transfer(address from, address to, uint256 value) internal {
require(to != address(0));
require( to != address(this) );
_balances[from] = _balances[from].sub(value);
_balances[to] = _balances[to].add(value);
emit Transfer(from, to, value);
}
The audited contract can be deployed.