XODEX

CertiKFiles named in the report

CertiK reviewed XODEX on 19 May 2023: 18 findings, 0 critical; 8 marked fixed, 3 acknowledged, 7 open.

No open critical findings
Open the reportOpen XODEX’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings18

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High021
Medium012
Low705
HighImproper Update For Router AddressFixed

The `set_New_Router_and_Make_Pair()`, `set_New_Router_Address()`, and `set_New_Pair_Address()` functions allow the contract owner to update either the pair contract or the router contract. Neither `set_New_Router_and_Make_Pair()` nor `set_New_Router_Address()` check if the pair has been created. If the pair has already been created, then calling `set_New_Router_and_Make_Pair()` on the factory contract will cause this function to revert. It would not be possible to update the router to this address with `set_New_Router_and_Make_Pair()` function. In addition, if the `set_New_Pair_Address` contract is set to an invalid pair then this would cause a denial of service when transferring tokens if the `swapTokens` functions is called.

MediumIncorrect Usage of EqualityFixed

The process_Tokens allows the `owner` to swap XODEX Tokens for BNB. However, consider the following lines of code within the function. ```solidity if (percent_Of_Tokens_To_Process > 100) { percent_Of_Tokens_To_Process == 100; } ``` The equality symbol `==` is incorrectly called.

MediumMissing Bound CheckFixed

The XODEX contract has three functions that enable the contract owner to update certain parameters: set_Number_Of_Transactions_Before_Liquify_Trigger, set_Max_TX_Percent, and set_Max_Wal_Percent. The set_Number_Of_Transactions_Before_Liquify_Trigger function allows the owner to update the maximum number of transactions that can occur before triggering a liquidity swap. The set_Max_TX_Percent function enables the owner to update the maximum percentage of tokens that can be transferred in a single transaction. Finally, the set_Max_Wal_Percent function allows the owner to update the maximum percentage of tokens that can be held by any single wallet.

LowLogical issue about `_TotalFee` in `transfer()`Fixed

The `_TotalFee` initially equals `_buyFee + _sellFee`. When a user tries to buy or sell tokens, it is assigned to either `_buyFee` or `_sellFee`. However, the `_TotalFee` is not recovered after the buy or sell transaction.

LowMissing Zero Address ValidationFixed

Addresses should be checked before assignment or external call to make sure they are not zero addresses. The following functions do not have a zero address check: 1. `Update__Dev_Wallet` 2. `excludeFromFee` 3. `includeInFee` 4. `set_New_Router_and_Make_Pair` 5. `set_New_Router_Address` 6. `set_New_Pair_Address` 7. `recover_Tokens` 8. `process_Tokens`

LowReordering Zero CheckFixed

The `_transfer` includes the following logical statement: ```solidity require(from != address(0) && to != address(0), "ERR: Using 0 address!"); require(amount > 0, "Token value must be higher than zero."); ``` Moving the zero address check and zero transfer check to the beginning of the `_transfer` function can save gas by quickly eliminating obvious cases.

LowState Variable Should Be Declared ConstantFixed

The following state variables are never updated within the contract: 1. `_name` 2. `_symbol` 3. `_decimals` 4. `_tTotal` 5. `Burn_Wallet` 6. `maxFee` Variables that that never change should be declared as `constant` to save gas.

LowUnused State VariableFixed

The variable `_prevMaxToken` and the variable `_prevMaxTxAmount` are never used in within the `XODEX` contract.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (1)

  • XODEX--V2.sol

Part of XODEX’s security record

XODEX
Audits1 audit by 1 firmLast audit May 2023, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open XODEX’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us