GrabCoinClub

CertiK12 Oct 2022Files named in the report

Audit

CertiK reviewed GrabCoinClub on 12 Oct 2022: 11 findings, 0 critical; 2 marked fixed, 9 open.

No open critical findings

Open the report Open GrabCoinClub’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings11

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	2	1
Medium	0	0
Low	7	1

HighUser Receives Less Dividends Than ExpectedFixed

The function `grabDividends()` calculates the amount of dividends that the caller is entitled to using the function `calcDividend()` for each token owned. However, when the function transfer the token to the caller, only 10% of the tokens are actually sent. A user that calculate their own reward using `calcDividend()` for each token they owned calling `grabDividends()` would yield a drastically lower amount than expected.

LowBalance of `token`Fixed

The contract `Dividends` distributes `token` rewards to users, however, since the call is a `transfer()` and not a `mint()` there is no guarantee enough tokens are owned by the contract and able to be distributed, potentially causing users to be unable to claim rewards.