ZNS Token Upgrade

Quantstamp27 Oct 2023Files named in the report

Audit

Quantstamp reviewed ZNS Token Upgrade on 27 Oct 2023: 6 findings, 0 critical; 4 marked fixed, 2 acknowledged.

No open critical findings

Open the report Open ZNS Token Upgrade’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings6

Statuses are the security firm’s own, from its report.

Severity	Acknowledged	Fixed
Critical	0	0
High	0	0
Medium	0	0
Low	2	4

LowAccidental Token Burn Risks in New Transfer-to-Token Contract MechanismAcknowledged

The new implementation `MeowToken` introduces a token burn mechanism for direct transfers to the token's address, which is different from the previous implementation where transferred tokens were locked when transferred to the token address. This mechanism alters the token supply upon transfer to the token contract, which poses a risk of accidental burns during misdirected transfers. Furthermore, this change incurs a slight gas inefficiency due to the additional address check during each transfer when validating the `to` address.

LowUpgradabilityAcknowledged

While upgradability is not a vulnerability in itself, token holders should be aware that the token contract can be upgraded at any given time. This audit does not guarantee the behavior of future contracts that the token may be upgraded to.