search

EthereumCommonwealth / Auditing

Ethereum Commonwealth Security Department conducted over 400 security audits since 2018. Not even a single contract that we audited was hacked. You can access our audit reports in the ISSUES of this repo. We are accepting new audit requests.
https://audits.callisto.network/
GNU General Public License v3.0
133 stars 34 forks source link

Enjin Coin (ENJ) #308

Closed yuriy77k closed 5 years ago

yuriy77k commented 5 years ago

Audit request

Audit Top 200 CoinMarketCap tokens.

Enjin Coin (ENJ)

https://enjincoin.io/

Deployed at https://etherscan.io/address/0xf629cbd94d3791c9250152bd8dfbdf380e2a3b9c#contracts

Source code

https://etherscan.io/address/0xf629cbd94d3791c9250152bd8dfbdf380e2a3b9c#contracts

Disclosure policy

public

Platform

ETH

Number of lines:

230

MrCrambo commented 5 years ago

Auditing time 1 day

danbogd commented 5 years ago

Auditing time: 2 days.

yuriy77k commented 5 years ago

@MrCrambo @danbogd assigned

MrCrambo commented 5 years ago

My report is finished

danbogd commented 5 years ago

My report is finished.

gorbunovperm commented 5 years ago

Estimated auditing time is 1 day.

gorbunovperm commented 5 years ago

My report is finished.

yuriy77k commented 5 years ago

@gorbunovperm assigned

yuriy77k commented 5 years ago

Enjin Coin Security Audit Report

1. Summary

Enjin Coin smart contract security audit report performed by Callisto Security Audit Department

Audit Top 200 CoinMarketCap tokens.

https://enjincoin.io/

2. In scope

  1. ENJ.sol

3. Findings

In total, 2 issues were reported including:

No critical security issues were found.

3.1. ERC20 Compliance — event missing

Severity: note

Description

According to ERC20 standard when coins are minted a Transfer event should be emitted.

Code snippet

3.2. Owner privileges

Severity: owner privileges

Description

The owner can allocate unsold tokens after crowdsale to incentivisationFundAddress which is managed by the owner. It is common practice to burn unsold tokens.

Code snippet

4. Conclusion

The audited smart contract can be deployed. Only low severity issues were found during the audit.

5. Revealing audit reports

https://gist.github.com/yuriy77k/037ef6b053af5c51bb1942699a3995fe

https://gist.github.com/yuriy77k/3588be37d4f56a9b8f4cfc82b486ab3a

https://gist.github.com/yuriy77k/deebe5089b27642706b8fcd4c7e0bc28

MillianoConti commented 5 years ago

Reddit announcement