T.I.M.E. Dividend (TIME) - Ethereum

CertiK24 Mar 2023Files named in the report

CertiK reviewed Internet Money (T.I.M.E. Dividend (TIME) - Ethereum) on 24 Mar 2023: 3 findings, 0 critical; all marked fixed.

No open critical findings

Open the report Open Internet Money’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings3

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	1
Medium	0	0	1
Low	0	0	1

HighInitial Token DistributionFixed

All `T.I.M.E. Dividend` tokens are sent to the contract deployer when deploying the contract. This is a potential centralization risk as the deployer can distribute those tokens without the consensus of the community.

MediumFunction Calls User-Provided Addresses With No AcFixed

Calling a user provided address is dangerous, especially in a public function with no access control restriction. An attacker could deploy a malicious contract and use the vulnerable function to trigger a call to the malicious contract, potentially stealing user funds or causing other serious damages. ```solidity=161 function distributeAll(address internetMoneySwapRouter, uint256 amount) public { IInternetMoneySwapRouter(internetMoneySwapRouter).distributeAll(amount); } ```

LowUnsafe Integer CastFixed

```solidity=84 int256 correctionDelta = int256(magnifiedDividendPerShare * amount); ``` - The type conversion `int256(magnifiedDividendPerShare * amount)` from type uint256 to type int256 may flip the value's sign. ```solidity=134 uint256 product = uint256(int256(magDividendPerShare * balance) + correction); ``` - The type conversion `int256(magDividendPerShare * balance)` from type uint256 to type int256 may flip the value's sign.