NitroDome

QuillAudits8 Apr 2024Files named in the report

Audit · firm’s term: audit report

QuillAudits reviewed NitroDome Token (NitroDome) on 8 Apr 2024: 4 findings, 0 critical; 1 marked fixed, 3 open.

No open critical findings

Open the report Open NitroDome Token’s security record

Report hosted on quillaudits.com.

Trustblock does not review code.

Findings4

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	0	1
Medium	2	0
Low	1	0

MediumDependency on Manual Token Transfer for Claim FunctionalityOpen

The current implementation of the vesting contract requires that tokens be manually transferred to the contract by an administrator or other authorized entity before users can begin claiming their allocated tokens. This design introduces a dependency on human intervention and increases the risk of delays or errors in the token distribution process. Users are unable to claim any tokens until the contract itself holds enough tokens to cover these claims, potentially leading to dissatisfaction and a lack of trust if the tokens are not transferred in a timely manner or if the transfer is forgotten or mishandled.

MediumLack of Slippage Protection in Token Swap FunctionOpen

In the provided function _swapTokensForEth, the contract swaps its own tokens for Ether using Uniswap V2's router interface. The code specifies a minAmount of 0 for the amount of ETH to be received in return. This setting does not protect against slippage, which is the difference between the expected price of a trade and the executed price that can occur during periods of high volatility or low liquidity.

LowZero Cliff Period in Public Sale Vesting ScheduleOpen

The deployment script specifies the vesting schedule for the Public Sale with a cliff period set to zero months.