StandardArbERC20 (Arbitrum)

Findings

• high selfdestruct in contract code
  The source contains a selfdestruct path that can wipe the contract or force out its ETH.
• high Unprotected initializer
  A public initialize function has no initializer guard or caller check, so anyone may be able to call it.
• medium Privileged mint function
  An owner or role can mint new tokens.
• low Outdated Solidity compiler
  Compiled with Solidity 0.6.11, which predates built-in overflow checks and later compiler bug fixes.
• low Upgradeable contract
  The contract’s logic can be replaced by whoever controls upgrades.
• info Floating pragma
  The pragma allows a range of compiler versions instead of the exact one used.
• info Inline assembly
  The contract uses inline assembly, which bypasses the compiler’s safety checks.

Evidence, exact locations and fixes are in the deep report. How scoring works.

Facts

Contract

StandardArbERC20

Compiler

solc 0.6.11

Verified

Sourcify full match

Proxy

Beacon

Implementation

0x3f770ac673856f105b586bb393d122721265ad46

Owner

None/renounced

Code size

760

Badge

[![Vetted by DappVet](https://dappvet.com/badge/ic3W1Um7.svg)](https://dappvet.com/c/arbitrum/0xbfbcfe8873fe28dfa25f1099282b088d52bbad9c)

<a href="https://dappvet.com/c/arbitrum/0xbfbcfe8873fe28dfa25f1099282b088d52bbad9c"><img src="https://dappvet.com/badge/ic3W1Um7.svg" alt="Vetted by DappVet" height="20"></a>

Share on X