ResolvToken (Ethereum)

Findings

• high tx.origin used for authorization
  An access check relies on tx.origin, which a malicious contract can satisfy by phishing the owner.
• medium Admin-style function without access control
  A set/update/withdraw/rescue function has no access modifier and no caller check.
• medium ETH sent without a reentrancy guard
  A low-level call sends ETH from a function that has no reentrancy guard.
• medium Pause or trading switch
  A privileged account can pause transfers or switch trading off.
• medium Privileged mint function
  An owner or role can mint new tokens.
• medium Randomness from block values
  Random values are derived from block data that validators can predict or influence.
• low Upgradeable contract
  The contract’s logic can be replaced by whoever controls upgrades.
• info Floating pragma
  The pragma allows a range of compiler versions instead of the exact one used.
• info Inline assembly
  The contract uses inline assembly, which bypasses the compiler’s safety checks.

Evidence, exact locations and fixes are in the deep report. How scoring works.

Facts

Contract

ResolvToken

Compiler

solc 0.8.28

Verified

Sourcify full match

Proxy

ERC-1967

Implementation

0x5ac0551f79d10f9f2a7ce74eeffad23336060b9a

Owner

0x6025f799271d45af21953f9d8297e6e5efdc4a0f

Code size

1159

Badge

[![Vetted by DappVet](https://dappvet.com/badge/0zX3sk5H.svg)](https://dappvet.com/c/ethereum/0x259338656198ec7a76c729514d3cb45dfbf768a1)

<a href="https://dappvet.com/c/ethereum/0x259338656198ec7a76c729514d3cb45dfbf768a1"><img src="https://dappvet.com/badge/0zX3sk5H.svg" alt="Vetted by DappVet" height="20"></a>

Share on X