SwapToken (Ethereum)

Findings

• high Unprotected initializer
  A public initialize function has no initializer guard or caller check, so anyone may be able to call it.
• medium Address blacklist switch
  The source has functions that can block individual addresses.
• medium Arithmetic without overflow checks
  The code targets Solidity below 0.8 and does arithmetic without SafeMath, so overflows wrap silently.
• medium Pause or trading switch
  A privileged account can pause transfers or switch trading off.
• low Outdated Solidity compiler
  Compiled with Solidity 0.6.12, which predates built-in overflow checks and later compiler bug fixes.
• low Upgradeable contract
  The contract’s logic can be replaced by whoever controls upgrades.
• info Floating pragma
  The pragma allows a range of compiler versions instead of the exact one used.
• info Inline assembly
  The contract uses inline assembly, which bypasses the compiler’s safety checks.

Evidence, exact locations and fixes are in the deep report. How scoring works.

Facts

Contract

SwapToken

Compiler

solc 0.6.12

Verified

Sourcify full match

Proxy

ERC-1967

Implementation

0xffe273a973c66da5b8ad6772f2476dbd6491034e

Owner

None/renounced

Code size

2240

Badge

[![Vetted by DappVet](https://dappvet.com/badge/T0Kgbkfl.svg)](https://dappvet.com/c/ethereum/0xcc4304a31d09258b0029ea7fe63d032f52e44efe)

<a href="https://dappvet.com/c/ethereum/0xcc4304a31d09258b0029ea7fe63d032f52e44efe"><img src="https://dappvet.com/badge/T0Kgbkfl.svg" alt="Vetted by DappVet" height="20"></a>

Share on X