Kinka

CertiK22 Dec 2023Files named in the report

Audit

CertiK reviewed KINKA Website (Kinka) on 22 Dec 2023: 7 findings, 0 critical; 4 marked fixed, 3 acknowledged.

No open critical findings

Open the report Open KINKA Website’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

Severity	Acknowledged	Fixed
Critical	0	0
High	2	1
Medium	0	1
Low	1	2

High`Lockup` Not Checked in Function `transferFrom()`Fixed

In the function `transfer()`, if user in the lockup list, they can only transfer token after lockup date, but the function `transferFrom()` has no such validation and the user can transfer as they want.

MediumPotential Gas ExhaustionFixed

The `for` loop within functions `updateLockupList()` and `updateLockupTime()` takes the following variable `user_list.length`, as the maximal iteration times. If the size of the array is very large, it could exceed the gas limit to execute the functions. In this case, the contract might suffer from DoS (Denial of Service) situation.

LowDirectly Delete From Array By IndexFixed

Delete by index from an array in solidity would case the gap in array storage, and the array length would not change.

LowUnused Return ValueFixed

The return value of an external call is not stored in a local or state variable. ```solidity=233 erc20Token.batchTransfer(_from, _users, _values); ```