Quantstamp has audited the upgradeable `FloatController.sol` contract, implementing a token vault. The `owner` can add and remove whitelisted addresses, while the `operator` can transfer tokens to those whitelisted addresses. Each transfer carries a sequence number and the transferals have to be made in ascending order. The code is well-written and we have not identified any significant vulnerabilities. *Fix Review Update*: The client addressed the two informational findings as well as the two suggestions in commit `cffe6a2`.
Low | Medium | High | Critical | Total | |
---|---|---|---|---|---|
Not fixed | 1 | - | - | - | 1 |
Fixed | 1 | - | - | - | 1 |
Total | 2 | 0 | 0 | 0 | 2 |
# | File Name |
---|---|
1 | src/FloatController.sol |