Verse Farms (2023)

CertiK8 Feb 2023Files named in the report

CertiK reviewed Verse (Verse Farms (2023)) on 8 Feb 2023: 9 findings, 1 critical; 4 marked fixed, 1 acknowledged, 4 open.

1 critical finding, fixed

Open the report Open Verse’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	1
High	0	1	0
Medium	0	0	0
Low	4	0	3

CriticalFunction `_transfer()` should update rewardFixed

The token serves as a receipt for staking and is used to compute the user's reward. When a user's balance changes, his or her reward must be calculated immediately.

LowMissing Emit EventsFixed

The event `Transfer` should be emitted in the function `_stake` and `_withdraw` to support user account tracking in the explorer.

LowMissing Zero Address Validation in `SimpleFarm.soFixed

Addresses should be checked before assignment or external call to make sure they are not zero addresses. ```solidity=297 proposedOwner = _newOwner; ``` - `_newOwner` is not zero-checked before being used. --- ```solidity=331 managerAddress = _newManager; ``` - `_newManager` is not zero-checked before being used.

LowState Variable Should Be Declared ConstantFixed

State variables that never change should be declared as `constant` to save gas. ```solidity=9 string public name = "VerseFarm"; ``` - `name` should be declared `constant`. --- ```solidity=10 string public symbol = "VFARM"; ``` - `symbol` should be declared `constant`. --- ```solidity=12 uint8 public decimals = 18; ``` - `decimals` should be declared `constant`.