CFC-Audit

CertiK30 Aug 20231 address on Polygon (POS)

Audit

CertiK reviewed CFC Project (CFC-Audit) on 30 Aug 2023: 5 findings, 0 critical; 3 acknowledged, 2 open.

No open critical findings

Open the report Open CFC Project’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings5

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged
Critical	0	0
High	2	0
Medium	0	0
Low	0	3

LowMissing Error MessagesAcknowledged

The **require** can be used to check for conditions and throw an exception if the condition is not met. It is better to provide a string message containing details about the error that will be passed back to the caller.

LowSafeMath Not UsedAcknowledged

Mathematical expression does not check arithmetic overflow. Such unsafe math operation may cause unexpected behavior if unusual parameters are given.

LowUsage of `transfer`/`send` for Sending Native TokAcknowledged

It is not recommended to use Solidity's `transfer()` and `send()` functions for transferring native tokens, since some contracts may not be able to receive the funds. Those functions forward only a fixed amount of gas (2300 specifically) and the receiving contracts may run out of gas before finishing the transfer. Also, EVM instructions' gas costs may increase in the future. Thus, some contracts that can receive now may stop working in the future due to the gas limitation. ```solidity=677 0x06806458405C55E40D75Bd0fE1732500Cd1C229c.transfer(msg.value); ``` - `CFCToken.constructor` uses `transfer()`.