EthMCBv2 (Ethereum)

Findings

• high Unprotected initializer
  A public initialize function has no initializer guard or caller check, so anyone may be able to call it.
• medium ETH sent without a reentrancy guard
  A low-level call sends ETH from a function that has no reentrancy guard.
• medium Pause or trading switch
  A privileged account can pause transfers or switch trading off.
• medium Privileged mint function
  An owner or role can mint new tokens.
• low Outdated Solidity compiler
  Compiled with Solidity 0.6.10, which predates built-in overflow checks and later compiler bug fixes.
• low Upgradeable contract
  The contract’s logic can be replaced by whoever controls upgrades.
• info Floating pragma
  The pragma allows a range of compiler versions instead of the exact one used.
• info Inline assembly
  The contract uses inline assembly, which bypasses the compiler’s safety checks.

Evidence, exact locations and fixes are in the deep report. How scoring works.

Facts

Contract

EthMCBv2

Compiler

solc 0.6.10

Verified

Sourcify full match

Proxy

ERC-1967

Implementation

0xcbe10aa4baab18e75f6d9778aca6c1afb889a7cf

Owner

None/renounced

Code size

2240

Badge

[![Vetted by DappVet](https://dappvet.com/badge/DqVrXECB.svg)](https://dappvet.com/c/ethereum/0x4e352cf164e64adcbad318c3a1e222e9eba4ce42)

<a href="https://dappvet.com/c/ethereum/0x4e352cf164e64adcbad318c3a1e222e9eba4ce42"><img src="https://dappvet.com/badge/DqVrXECB.svg" alt="Vetted by DappVet" height="20"></a>

Share on X