FRAXShares (Ethereum)

Findings

• medium ETH sent without a reentrancy guard
  A low-level call sends ETH from a function that has no reentrancy guard.
• medium Fee setter without an upper bound
  A fee or tax setter has no maximum, so fees could be raised arbitrarily.
• medium Pause or trading switch
  A privileged account can pause transfers or switch trading off.
• medium Privileged mint function
  An owner or role can mint new tokens.
• medium Randomness from block values
  Random values are derived from block data that validators can predict or influence.
• low Outdated Solidity compiler
  Compiled with Solidity 0.6.11, which predates built-in overflow checks and later compiler bug fixes.
• low Raw ecrecover
  Signatures are checked with raw ecrecover, which allows malleable signatures and returns zero on bad input.
• info Floating pragma
  The pragma allows a range of compiler versions instead of the exact one used.
• info Inline assembly
  The contract uses inline assembly, which bypasses the compiler’s safety checks.

Evidence, exact locations and fixes are in the deep report. How scoring works.

Facts

Contract

FRAXShares

Compiler

solc 0.6.11

Verified

Sourcify partial

Proxy

No

Owner

None/renounced

Code size

12769

Badge

[![Vetted by DappVet](https://dappvet.com/badge/JwXttAC9.svg)](https://dappvet.com/c/ethereum/0x3432b6a60d23ca0dfca7761b7ab56459d9c964d0)

<a href="https://dappvet.com/c/ethereum/0x3432b6a60d23ca0dfca7761b7ab56459d9c964d0"><img src="https://dappvet.com/badge/JwXttAC9.svg" alt="Vetted by DappVet" height="20"></a>

Share on X