TokenSoft Token

Quantstamp16 Jun 2020Files named in the report

Audit

Quantstamp reviewed TokenSoft Token on 16 Jun 2020: 5 findings, 0 critical; 2 marked fixed, 3 acknowledged.

No open critical findings

Open the report Open TokenSoft Token’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings5

Statuses are the security firm’s own, from its report.

Severity	Acknowledged	Fixed
Critical	0	0
High	0	0
Medium	1	0
Low	2	2

LowEvent Emitted for Removing a Non-whitelisted AddressFixed

Inside the function `_removeFromWhitelist()`, an event is emitted regardless of whether the address `addressToRemove` is present inside the whitelist. As a result, the event information emitted may be misleading.

LowPossible Transfer to 0x0 Contract AddressFixed

It is rarely desirable for tokens to be sent to the `0x0` address (intentional token burning is a notable exception) nor to the contract itself. However, these mistakes are often made due to human errors. Hence, it's often a good idea to prevent these mistakes from happening within the smart contract itself. Currently, we've observed that most of the methods that have an address parameter do not check for `0x0` (e.g. `_removeFromWhitelist(...)` in the file `Whitelistable.sol` and `constructor(...)` in `Proxy.sol`).